edgeultra[.]cc

Analysis indicates that edgeultra.cc is currently active and was registered on June 20 2025 through Global Domain Group LLC. The zone resolves to the IPv4 address 198.12.66.123, which belongs to AS36352 (HostPapa) located in the United States. The domain is served by the nameservers ns1.host-forest.com and ns2.host-forest.com and presents a valid TLS certificate issued by Let’s Encrypt (R13). An HTTP GET returns status 200 and the sole observed page title is “Home”. Reputation services assign extremely low trust scores: Gridinsoft 1/100, Scamadviser 1/100. The domain is listed on a single public blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows that two of ninety‑five scanners flagged the domain, confirming the presence of malicious indicators. The available intelligence does not disclose the specific phishing campaign content, target brand, or payload, and no visual inspection of the site has been performed. Given the combination of a recent registration, low reputation scores, blocklist presence, and multiple vendor detections, the domain should be treated as high‑risk. Defenders are advised to block DNS resolution and HTTP/S traffic to edgeultra.cc, monitor for any related command‑and‑control or credential‑harvesting activity, and incorporate the IP address 198.12.66.123 into network‑level deny lists. Ongoing observation is recommended to capture any evolving tactics that may appear as the site matures.