efhjfjdhdksdhlfsfsvjvj-dprhmd8pvnvd[.]edgeone[.]dev

This domain, efhjfjdhdksdhlfsfsvjvj-dprhmd8pvnvd.edgeone.dev, is assessed as a high-risk delivery_scam domain, specifically focusing on credential theft. The threat poses a significant risk to users who may inadvertently provide sensitive information such as login credentials, which can be used for further malicious activities.

Analysis indicates that the domain was created on June 08, 2026, and is currently offline. The SSL certificate is issued by DigiCert, Inc., which, while a reputable authority, does not guarantee the legitimacy of the domain. The domain is registered through Aceville and resolves to the IP address 43.174.246.29. VirusTotal has flagged this domain as malicious, with 18 out of 95 security vendors identifying it as a threat. Additionally, the domain appears on five security blocklists, including PhishDestroy, PhishingArmy, StevenBlack, CERT-PL, and OISD. These blocklists are maintained by trusted security organizations, further corroborating the high-risk status of the domain.

To mitigate the risks associated with this credential theft domain, users should avoid interacting with any links or communications that direct them to efhjfjdhdksdhlfsfsvjvj-dprhmd8pvnvd.edgeone.dev. Organizations should update their network security policies to block this domain and educate employees about the signs of phishing attacks, particularly those involving delivery scams. Regularly monitoring and updating domain blocklists and using multi-factor authentication can significantly reduce the likelihood of credential theft and subsequent unauthorized access to sensitive systems and data.