unaware-violet-zdvlmj66[.]edgeone[.]dev

Analysis of the domain unaware-violet-zdvlmj66.edgeone.dev indicates it is an active phishing infrastructure operating as of August 4, 2026. The domain resolves to the IP address 43.174.246.29, which is associated with Tencent Cloud hosting services. Infrastructure review reveals the domain was registered through Tencent Cloud, a provider commonly utilized for both legitimate and malicious purposes. The absence of nameserver records (NS_NOT_FOUND) is atypical for standard domains and may suggest misconfigured or intentionally obscured DNS settings, a tactic occasionally observed in phishing operations to evade detection or takedown efforts.

The domain presents a valid SSL certificate issued by DigiCert, Inc., specifically a DigiCert Secure Site OV G2 TLS certificate with RSA4096 and SHA256 encryption. While the presence of a valid certificate from a reputable issuer is not inherently malicious, it is frequently exploited by threat actors to lend credibility to phishing sites and bypass browser security warnings. As of the latest scans, 11 out of 91 security vendors on VirusTotal have flagged this domain as malicious, and it appears on at least one security blocklist, further supporting its classification as a high-risk phishing domain. No specific brand or service impersonation has been confirmed in the available data, and the exact content of the phishing page remains unanalyzed.

However, the domain name structure, including the 'edgeone' subdomain, suggests potential targeting of users associated with cloud or edge computing services. Defenders are advised to treat this domain as malicious and implement blocking measures at the network and endpoint levels. Monitoring for related infrastructure, such as connected IP addresses or additional domains registered under the same provider, is recommended to identify and mitigate associated threats.