edgex[.]sa[.]com

This domain, edgex.sa.com, is confirmed to engage in brand impersonation targeting Google, presenting itself as an "Advanced Learning Platform" to deceive users into interacting with fraudulent content. The site mimics legitimate educational or productivity services associated with the brand, likely aiming to harvest credentials, distribute malware, or manipulate users into unauthorized actions. The use of a seemingly professional interface, combined with the trusted brand name, increases the likelihood of successful deception, particularly among users seeking Google-affiliated tools or training resources. Analysis indicates the domain was registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. It appears on two security blocklists and is flagged by 3 out of 95 security vendors on VirusTotal, including detections from ScamSniffer and PhishDestroy. The site employs technologies such as PHP, Materialize CSS, jQuery CDN, and Cloudflare infrastructure, including HTTP/3 support. The SSL certificate is issued by Google Trust Services, which may lend an additional layer of perceived legitimacy to unsuspecting visitors. The Gridinsoft trust score of 0/100 further corroborates the malicious nature of the domain. Users who visited edgex.sa.com should immediately cease all interaction with the site and any associated content. Those who entered credentials or downloaded files should assume compromise and take the following steps: revoke access to any linked accounts, reset passwords using a secure device, and enable multi-factor authentication where available. Monitor financial and account activity for unauthorized transactions or changes. If malware exposure is suspected, conduct a full system scan using updated security tools and consider isolating the affected device from networks. Report the incident to relevant security teams or incident response platforms to aid in broader threat mitigation efforts.