comparable-beige-ghqsab8y[.]edgeone[.]dev
“Tencent Edgeone”
comparable-beige-ghqsab8y.edgeone.dev — सामग्री अनुपलब्ध. ब्रांड प्रतिरूपण: Genericemail; घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 15/91 (BitDefender, CyRadar, ESET, Fortinet, G-Data); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: MarkMonitor.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain comparable-beige-ghqsab8y.edgeone.dev was observed hosting a page titled “Tencent Edgeone” before being taken offline. DNS resolution points to the IPv4 address 43.174.246.29, which belongs to ASN 139341 (ACE) and is geolocated in Singapore. The domain is served behind Cloudflare, as indicated by the presence of Cloudflare‑related headers and the use of HSTS, and the page content was built with Bootstrap, jQuery and the cdnjs CDN library. The SSL certificate is issued by DigiCert Secure Site OV G2 TLS, uses a 4096‑bit RSA key, and was valid as of the 2022 issuance, confirming a legitimate certificate chain but offering no guarantee of benign intent.
VirusTotal recorded 15 detections out of 91 scanning engines, and the domain appears on a single external blocklist, suggesting that multiple security vendors have flagged it as malicious. Additional reputation signals include a Gridinsoft trust score of 0 / 100 and a block by the PhishDestroy feed, both indicating high confidence of abuse. The registrar listed is MarkMonitor Inc., a well‑known registrar often used by large enterprises, which may reflect an attempt to lend credibility. Nameserver configuration uses ns3.dnsv2.com and ns4.dnsv2.com, consistent with the observed hosting environment.
HTTP response returned a 404 status, and the site is currently offline, limiting immediate analysis of payloads or credential‑stealing forms. Defenders should continue to block the IP address 43.174.246.29 and the domain itself at perimeter and DNS layers, update any URL filtering solutions with the domain and its associated hostnames, and monitor for any resurgence of the domain or related subdomains. Given the limited public artifacts, threat hunters should query internal logs for any outbound connections to the IP or TLS handshakes involving the DigiCert certificate fingerprint, and review authentication logs for attempts to interact with services that might be mimicking Tencent.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | comparable-beige-ghqsab8y.edgeone.dev |
malicious | Sinkholed |
| OpenDNS | comparable-beige-ghqsab8y.edgeone.dev |
phishing | Phishing Block |
| DNS4EU | comparable-beige-ghqsab8y.edgeone.dev |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: edgeone.dev
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain edgeone.dev behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 5 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260619-A8B489 Recipient: as139341_abuse@aceville.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।