ai-okr-ee5lovzf96[.]edgeone[.]dev

This domain, ai-okr-ee5lovzf96.edgeone.dev, is flagged as a generic phishing site impersonating an AI-OKR management system. The page title 'AI-OKR 管理系统' suggests a fraudulent login portal targeting users of corporate or enterprise objective-tracking platforms, likely harvesting credentials under the guise of an AI-driven productivity tool. No explicit crypto drainer or brand-specific impersonation (e.g., Microsoft, Google) was identified, but the phishing kit appears to be a custom-built credential harvester leveraging modern frontend frameworks. Analysis indicates the domain was registered through Aceville Pte. Ltd. and resolves to the IP address 43.174.246.29. VirusTotal detection shows 10 out of 95 security vendors flagging the domain as malicious. The domain appears on 2 distinct security blocklists and is currently not listed in Google Safe Browsing (GSB) databases. SSL certificate is issued by DigiCert, Inc., and the site infrastructure includes Tailwind CSS, HSTS enforcement, and Alibaba Cloud CDN, suggesting an attempt to mimic legitimate enterprise-grade web applications. The domain has been taken offline, reducing immediate exposure risk. However, residual threats persist due to potential credential reuse by victims and the possibility of infrastructure reuse under new domains. Organizations should monitor for unauthorized access attempts using harvested credentials and implement multi-factor authentication (MFA) for all corporate systems. Network-level blocks should be maintained for the domain and associated IP (43.174.246.29) to prevent accidental re-exposure. Historical logs should be reviewed for connections to this domain or IP to identify compromised accounts.