Security Scan Report: supprtrcb-dpldxysyz96q.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://supprtrcb-dpldxysyz96q.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake WeTransfer file-sharing page on an edgeone.dev subdomain: it harvests email/password via a 'login to download' gate and can exfiltrate them through an embedded Telegram bot token. Do not enter credentials.

Risk Factors (5)
Brand impersonation of WeTransfer on a non-official, unranked platform subdomain
Credential-harvesting login form (email + password) on a page that has no legitimate reason to request them
Telegram bot token embedded in page script — credentials can be sent directly to the attacker
Urgency/deception framing: expiring file transfer gated behind a login 'verification'
External IP/geolocation lookup via ip-api.com from page scripts
Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'supprtrcb-dpldxysyz96q.edgeone.dev' is registered and includes subdomain 'supprtrcb-dpldxysyz96q'. Count 7 characters in 'edgeone' holding four vowels versus three consonants. Word splitting yields 2 words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

® Files Ready for Download 3 files, 36.21 MB, Transfer expires in 7 days Company_Profile.pdt @ [R) | Order_List-764833.pat @ 421MB 5MB Specifications.mp4 27M 12) Login to Download Files Just one...

Page Load Overview

1.26s
Total Load Time
255 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:612 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
62%
download file sharing
53%
technology software
36%
documentation technical
31%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.247.29Singapore
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1208.95.112.1United States
AS53334Total Uptime Technologies, LLC
143.174.246.29Singapore
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
98--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBE44A35A75A1C05DAABDAA9B481BE643C309D73C943C0D8F290B35E8ACF13547EDB25

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:UkTBMXfRWZEqaNuWEO1iJD5WvLPGAoaov:UCjZEqMuWEO1iJD5Wvw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:692253:QCR4AACmrFUIBYBQYAsoQrHIBiOYEgrOCEiUhuUhE4BAgQQgQGAiCCAOQggHWDATKZgCxDVGBIBo0QRIahEiGIoIIWAOwQVi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f0f87c7cf07270f
Perceptual Hash:b33c8dcdcc33388c
Difference Hash:febc9d8cac88cafc
Wavelet Hash:1f0f0707cf070f0f
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data