yearling-coral-ahgz1ctyuy[.]edgeone[.]app

The domain yearling-coral-ahgz1ctyuy.edgeone.app has been identified as a high-risk generic phishing threat, primarily designed to impersonate legitimate login pages. It is actively deceiving users into providing sensitive information such as credentials, likely targeting a specific user base familiar with the page title language, suggesting a possible regional focus. This type of attack compromises personal and financial data, potentially leading to identity theft or unauthorized access to user accounts.

This domain was registered through Tencent EdgeOne and appears to be relatively new, with a creation date of May 20, 2026. The presence of its SSL certificate issued by DigiCert does not imply safety, as phishers often use valid certificates to feign legitimacy. The site is currently listed on at least one security blocklist and has been flagged by 12 out of 95 security vendors on VirusTotal, indicating a significant consensus within the cybersecurity community about its malicious nature. The domain resolves to an IP based in Germany, although this is often used by attackers to disguise their actual location.

For users who may have visited this site, it is crucial to immediately change any passwords entered and contact financial institutions if sensitive data was disclosed. It is recommended to enable multi-factor authentication for added security and conduct a malware scan on devices used to access the site. Being vigilant about phishing indicators such as unexpected URLs, misspelled domains, and unusual page titles can help prevent future incidents. Reporting such suspicious domains to relevant authorities can aid in mitigating their impact on others.