edc[.]dinero[.]best

Analysis of the domain edc.dinero.best shows a newly registered infrastructure that is actively serving a generic phishing campaign. The domain was created on July 9, 2026 and resolves to the IP address 185.26.106.234. Its DNS configuration uses three NetIM nameservers (ns1.netim.net, ns2.netim.net, ns3.netim.net), indicating registration through the NETIM registrar. VirusTotal scans have returned detections from 10 of 91 security vendors, reinforcing the malicious classification. The site remains active as of the report date (July 17, 2026) and is assigned a high risk rating. No additional intelligence such as page content, targeted brands, or payload details is available at this time. Defenders should treat edc.dinero.best as a confirmed phishing resource and implement immediate blocking at network perimeter and endpoint controls. Continuous monitoring of DNS queries for the domain and its associated IP address is recommended, as is the inclusion of the IP 185.26.106.234 in threat‑intel feeds and sinkhole operations. Organizations should also audit email filtering rules for messages that reference the domain and consider proactive threat‑hunting for related indicators of compromise.