ssasdsws-dp6rwgcozchq[.]edgeone[.]dev

This domain, ssasdsws-dp6rwgcozchq.edgeone.dev, is flagged as an active high-risk phishing infrastructure specifically designed for email credential harvesting. Analysis indicates the site impersonates legitimate mail login portals, as evidenced by its page title 'MAIL,' which aligns with common phishing tactics targeting corporate or personal email accounts. The threat type is classified as generic_phishing, with a focus on stealing user credentials through deceptive login interfaces. Infrastructure analysis reveals the domain resolves to the IP address 43.174.246.29 and remains operational at the time of assessment. VirusTotal detection metrics show 7 out of 95 security vendors have flagged this domain as malicious, indicating a moderate but concerning level of consensus among threat intelligence sources. The domain is hosted on edgeone.dev, a content delivery network that may be abused to lend legitimacy to phishing campaigns. No additional registrar or creation date data is available, but the active status and lack of widespread blocklisting suggest it may still be evading detection by some security layers. Mitigation against this threat requires immediate action from network administrators and end-users. Organizations should block the domain ssasdsws-dp6rwgcozchq.edgeone.dev and its resolving IP 43.174.246.29 at the firewall or DNS level to prevent access. End-users should be educated to recognize phishing indicators, such as unexpected login prompts or mismatched URLs, particularly those mimicking email services. Multi-factor authentication (MFA) should be enforced for all email accounts to mitigate the impact of credential theft. Security teams are advised to monitor logs for connections to the domain or IP and investigate any compromised accounts for unauthorized access.