revolutionary-magenta-wzucs9d1sm-h6a3ez2c6c[.]edgeone[.]app

The domain revolutionary-magenta-wzucs9d1sm-h6a3ez2c6c.edgeone.app has been identified as a generic phishing threat and is currently offline. The phishing campaign appears to mimic a brand with its page title in a non-Latin script, potentially targeting users familiar with the brand for illicit data capture. Phishing threats like this domain seek to deceive users into divulging sensitive information through misleading aesthetics and false representation.

Technical analysis of the domain reveals that it was resolved to the IP address 101.33.10.57, located in Germany (DE), and managed through Tencent EdgeOne. The domain was created on May 15, 2026, and possesses an SSL certificate issued by DigiCert, Inc. The certificate is identified as DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1. Importantly, the domain was flagged by 19 out of 95 security vendors on VirusTotal for its phishing activities. It has also been blocked by PhishDestroy and is listed in one security blocklist.

Currently, the domain is offline, which mitigates immediate risk. However, users should remain vigilant against similar threats by verifying URLs and ensuring the legitimacy of websites before inputting sensitive information. Organizations should conduct regular phishing awareness training and implement comprehensive security solutions, including anti-phishing filters, to prevent such attacks. Security teams are advised to continue monitoring threat intelligence feeds to maintain awareness of emerging phishing campaigns.