Security Scan Report: 947386453.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 4 domains to perform 5 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://947386453.edgeone.dev/?4f079310f033b4b5a%[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake 'Adobe Acrobat PDF Reader' page on a free edgeone.dev subdomain that impersonates Adobe and harvests email + password credentials behind a bogus 'secured file' download pretext — confirmed credential phishing.

Risk Factors (5)
Impersonation of Adobe Acrobat Reader branding on a non-Adobe, unranked domain
Form captures email + password credentials (credential harvesting)
Deceptive file-download/robot-verification pretext used to extract credentials
Free/hosting-platform subdomain with unknown creation date
Anti-analysis behaviour (context menu blocked); unranked third-party script host
Domain age information unavailable

Details

Page Title

PDF Reader

Scan Type

public

Domain Name Analysis

Domain '947386453.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain '947386453'. Count 7 characters in 'edgeone' with 4 vowels and 3 consonants. It segments into two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

[a Search forfiles Sign inj SEES POES Always open PDFs in Acrobat Reader ‘y Export PDF i Addcomments [R) Requeste-signat.. © Z Filt&sign Seeall tools = ys ope $$ _____ Set as default ‘Adobe ExportPOF...

Page Load Overview

7.51s
Total Load Time
499 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:130 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software79% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
79%
documentation technical
69%
adult content
63%
news media journalism
51%
healthcare medical
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.246.29Singapore
1142.251.127.95Google · CDNUnited States
AS15169Google LLC
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1185.174.173.22Amsterdam, North Holland, Netherlands
AS21100Route 95 LLC
54--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15BC423B128581C3C720C91B37533AF6972619DA5CC2D84DDD15A76DF2B98E3802BFAE1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:t0XB/KYzOf12YD9MHTEZazRSKx4YNjCKtU+DkjSmVPR9er:t4pO92W9MzEZa1SMTBftXkbVmr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:583480:jCKwECBaAgCojeBAIQVAE1BQSEEQQDsx9CyMMQYZggEGhBAQGApkkABVHKqXETUAC/AAnRGCEhljcKVAlAQKMCmBgFIcACaw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:89d423639c88dddd
Difference Hash:d2f4b2b2b3b3d3cc
Wavelet Hash:7e1e1e1b1939212f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data