mnbvcxz[.]edgeone[.]app

This domain, mnbvcxz.edgeone.app, is flagged as a generic phishing infrastructure designed to mimic EdgeOne Pages, a legitimate content delivery and security platform. Analysis indicates the site likely targeted users with credential harvesting tactics, presenting a cloned interface to trick victims into submitting sensitive login details. No specific drainer kit or wallet-draining malware has been confirmed, but the domain’s structure and SSL certificate suggest an attempt to appear as an official EdgeOne portal. Infrastructure analysis reveals the following technical indicators: the domain is registered through MarkMonitor, Inc. and resolves to the IP address 43.174.14.129, hosted on AS139341 (ACE) in Singapore. It was created on May 10, 2023, and has been detected by 19 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was blocked by PhishDestroy. The SSL certificate is issued by DigiCert, Inc. (DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1), a detail often exploited by threat actors to lend false credibility to phishing pages. As of the latest assessment, mnbvcxz.edgeone.app is offline, reducing immediate risk to end users. However, the domain’s infrastructure remains registered and could be reactivated or repurposed for future campaigns. Organizations and individuals are advised to monitor for renewed activity, block the domain and associated IP at the network level, and verify the legitimacy of any EdgeOne-related communications. Users who may have interacted with this domain should reset credentials and enable multi-factor authentication on affected accounts.