com-edge-api-gateway-service-gateway[.]pro

This domain, com-edge-api-gateway-service-gateway.pro, is flagged as a high-risk, active phishing site. The domain resolves to the IP address 188.114.96.3, which is located in the United States and is part of the Cloudflare, Inc. network (AS13335). The site is currently displaying a 522: Connection timed out error, which suggests that the server is timing out or not responding, a common technique used by phishing sites to avoid detection and analysis. The domain is registered through Cloudflare, Inc., and uses nameservers leia.ns.cloudflare.com and vasilii.ns.cloudflare.com.

The SSL certificate is issued by Google Trust Services, which may indicate an attempt to appear legitimate or secure to unsuspecting users. The domain has been detected by one security blocklist and is blocked by PhishDestroy, a known security provider. Gridinsoft, a reputable security vendor, has assigned this domain a trust score of 0 out of 100, indicating a very high level of suspicion. The HTTP status code 301 suggests that the domain is being redirected to another URL, which could be part of the phishing kit's strategy to lead users to a malicious page.

The phishing kit identified on this domain is an Airdrop Scam, a type of attack where users are tricked into providing personal or financial information under the pretense of receiving free cryptocurrency or other rewards. While the exact content of the site has not been analyzed, the combination of the 522 error, the redirection status, the low trust score, and the presence of the Airdrop Scam kit strongly suggests that this domain is being used for phishing activities. Defenders should take immediate action to block this domain and warn users of the potential risks. Additional monitoring and analysis are recommended to track any changes in the site's behavior or content.