edfdc0fa5e2ae6e3c6d7156f3b2ce00c[.]cdn[.]bubble[.]io

The domain edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io has been identified as a generic phishing threat. It is currently offline, but while active it posed a risk to users by attempting to harvest sensitive information through deceptive means. No specific brand was impersonated in this campaign, but the generic nature of the phishing suggests it could have been used in a wide range of credential-harvesting schemes.

This domain was flagged by 9 out of 95 VirusTotal vendors, indicating a moderate detection rate among security solutions. It appeared on two security blocklists and was created on April 2, 2026. The domain was hosted on the bubble.io CDN platform, which is a legitimate service, but this instance was used maliciously. The trust score from various sources is low due to the vendor flags and blocklist presence, though no registrar information is available in the provided data. The IP address associated with the domain is not specified, but the bubble.io CDN infrastructure likely pointed to a shared hosting environment.

As the domain is now offline, the immediate threat is neutralized. However, users should remain vigilant against similar phishing attempts that may use CDN subdomains to appear legitimate. It is recommended to avoid clicking on unsolicited links, verify the authenticity of any website requesting personal information, and use security tools that can detect phishing domains. If users have previously interacted with this domain, they should change passwords and monitor accounts for suspicious activity.