kloclibkblink-dp73tqm8r6w5[.]edgeone[.]dev

Analysis of kloclibkblink-dp73tqm8r6w5.edgeone.dev indicates that the domain is currently active and resolves to the IPv4 address 43.174.247.29. The domain lacks publicly resolvable name server records, as indicated by the NS_NOT_FOUND status, which may suggest intentional obfuscation of hosting infrastructure. VirusTotal has recorded detections from 14 of 91 scanning engines, confirming that a subset of security products have identified malicious behavior associated with the domain. The classification of the threat as generic_phishing aligns with the observed pattern of domains used to harvest credentials without targeting a specific brand. No additional intelligence such as page content, target brand, or phishing kit details has been disclosed, leaving the exact lure and victim profile uncertain. Defenders should block network traffic to 43.174.247.29 and add the fully qualified domain name to domain blocklists. Monitoring for DNS queries to this domain and correlating any authentication attempts originating from internal users with the observed IP address is recommended. Incident response teams should treat any credential submissions to this domain as compromised and initiate credential rotation and user notification procedures. Continuous re‑evaluation is advised, as the detection count may change with further scanning.