mailbox-dpkjr4w7vaw1[.]edgeone[.]dev

mailbox-dpkjr4w7vaw1.edgeone.dev is currently listed as an active generic phishing infrastructure. The domain resolves to the IPv4 address 43.174.246.29, which is hosted on Tencent Cloud infrastructure. Registration information indicates the domain was provisioned through Tencent Cloud, and the authoritative name server lookup returns NS_NOT_FOUND, suggesting the domain may be using custom or hidden name servers. The domain is present on two public blocklists and has been flagged by PhishDestroy and OpenPhish, confirming its recognition by dedicated anti‑phishing feeds.

VirusTotal analysis shows that 20 out of 91 scanned security engines have returned a malicious classification for the domain, providing additional independent confirmation of its abusive nature. No publicly available page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are included in the current intelligence set, so the exact content served by the site remains unverified. The lack of visible DNS delegation and the reliance on a cloud provider are consistent with a fast‑flux or disposable‑hosting approach commonly employed by phishing operators to evade takedown efforts. Given the observed indicators, security teams should immediately block resolve-to IP 43.174.246.29 and the domain name mailbox-dpkjr4w7vaw1.edgeone.dev at perimeter defenses.

Network monitoring should be configured to alert on any outbound connections to the IP range associated with the hosting provider. Incident response procedures should include scanning for credential leakage or compromise attempts that may be linked to emails referencing the domain. Continuous re‑evaluation is advised, as further analysis of the web content or additional threat‑intel feeds may reveal new tactics, techniques, and procedures associated with this infrastructure.