Security Scan Report: fil-eggen-dpt6n0jn28p0.edgeone.dev

Submitted: Sep 21, 2026, 12:45:24 PMCompleted: Sep 21, 2026, 12:46:09 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Credential-phishing portal impersonating an 'example.com Mail Authentication' page on a free edgeone.dev subdomain, harvesting email and password with kit-style IP fingerprinting scripts.

Risk Factors (4)
Credential-harvesting form (password + email) on a suspicious shared-hosting subdomain
Brand claim ('example.com Mail Authentication') on a domain that is not example.com
Unknown subdomain age on a free hosting platform namespace
Client-side geolocation/IP-lookup scripts used for victim fingerprinting
Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain name 'fil-eggen-dpt6n0jn28p0.edgeone.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'fil-eggen-dpt6n0jn28p0'. Count 7 characters in 'edgeone' with four vowels and three consonants. Splitting it apart reveals two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fil-eggen-dpt6n0jn28p0.edgeone.dev/?authorize?client_id=-

Page Load Overview

12.49s
Total Load Time
347 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:401 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
76%
government public service
33%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
443.174.247.29Singapore
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.246.29Singapore
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.69.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
152.6.161.198Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1142.251.20.103Google · CDNUnited States
AS15169Google LLC
118--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A5A2D65A49F30425B523E1783FFB53083671800B9606DD28B95C5394DFC8DA26ABFBE9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:d8BIGRLRNm69g1vr1ntjbTe5VcQ2PBKemGOdDT5ghwhmVutAoSuCIdtLrJKRwq18:mBIBfVKDEoX4sGMflldD+3P2bsPQf2OR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21520:IRPEozhY9IQGkqIhFAFlYJwQEQwAErKTSLCwQhSEAYNQAOAFBA4AQKDhyjPCJLCEECYRjDBdhEZGgEUxsOQMDRgFQ2gjikD4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:9c3c36c1c9c36765
Difference Hash:10322eb2b20c0000
Wavelet Hash:1f01013f1f070f0f
Color Hash:#ac6553

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data