ScanMalware.com

Security Scan Report: sore-indigo-cf1xx4cwja.edgeone.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1ce7101a-8fa9-41c8-922c-ad027bcb8b40Domain and IP registration (RDAP)/api/v1/rdap/1ce7101a-8fa9-41c8-922c-ad027bcb8b40How often this domain was scanned/api/v1/domain/stats/sore-indigo-cf1xx4cwja.edgeone.appScan history for this domain/api/v1/domain/history/sore-indigo-cf1xx4cwja.edgeone.app?limit=15
This website contacted 6 IPs in 2 countries across 4 domains to perform 9 HTTP transactions. The main domain is edgeone.app and was registered 3 years 5 months ago.

Submitted URL: https://sore-indigo-cf1xx4cwja.edgeone.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing: an 'Account Verification' login on a free edgeone.app subdomain captures email/password and exfiltrates them to a Telegram bot via embedded token. Do not enter credentials.

Risk Factors (5)
Credential exfiltration to Telegram via embedded bot token (definitive phishing kit behavior)
Credential harvesting login form on a throwaway hosting-platform subdomain
Cross-origin IP-lookup call (api.ipify.org) feeding the exfiltration payload
Threat-intel report of phishing for the primary domain
Obfuscated/encoding JS in inline scripts
Domain age information unavailable

Details

Page Title

Account Verification

Scan Type

public

Domain Name Analysis

The domain name 'sore-indigo-cf1xx4cwja.edgeone.app' uses the application-focused generic top-level domain (.app) with subdomain 'sore-indigo-cf1xx4cwja'. Count 7 characters in 'edgeone' holding 4 vowels versus three consonants. Tokenizing the label suggests two words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sore-indigo-cf1xx4cwja.edgeone.app/

Page Load Overview

1.88s
Total Load Time
265 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:119 chars
Detector Agreement:50%

Website Classification

Primary Category

finance banking35% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
35%
news media journalism
34%
e-commerce shopping
29%
healthcare medical
28%
adult content
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
443.174.246.29Singapore
AS139341ACE
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.247.29Singapore
AS139341ACE
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
96--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B482735B24F724516A93E4BC3B9F63053265E0039A09CD287F9C53488F46B99ACB37CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:GU3RWl0Kikc+3eVPHbhPRHa4sx8utqqnA65Fk619uY/cQ5uG9Rk4HyfAy+ylJjI5:KQaF6IrfsiJ6eRCIdrfQs35

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18516:AABggBJDoTMRWRghjWAlAIMAHB4nYUMCIAo1QAZBZV0CQJq7iHQBlsAQ7qgMB0CUYOJAJEQAyAMEgQC8pkBvIhM0ZhLAUgAl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818180018000000
Perceptual Hash:9999cc6666333399
Difference Hash:32b2b24c300c0000
Wavelet Hash:38383c24fcfccccc
Color Hash:#bf6440

Other Hashes

Crop Resistant:32b2b24c300c0000

Scan History

Scan history not available

Unable to load historical scan data