edsydney[.]com

PhishDestroy identifies edsydney.com as an active credential-harvesting phishing domain designed to trick users into submitting login credentials under false pretenses. This domain mimics legitimate services to harvest usernames, passwords, and potentially two-factor authentication codes, enabling subsequent account takeovers or identity theft. Victims risk unauthorized access to email, banking, or corporate systems if credentials are reused. edsydney.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 17, 2025, and currently resolves to IP address 34.120.190.48. Despite zero detections on VirusTotal (0/95), this domain remains active and undetected by most antivirus engines, making it a stealthy threat to unsuspecting users. If you or someone in your organization visited edsydney.com, immediately cease use of any credentials entered on the site. Change passwords on all accounts where the same credentials were used, enable multi-factor authentication, and scan devices for malware. Report the domain to your IT security team or file a complaint with relevant authorities. Monitor accounts closely for suspicious activity and isolate any systems that may have accessed suspicious links.