Security Scan Report: nweb.edgeone.dev

Redirected to:
https://nweb.edgeone.dev/
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 8 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: http://nweb.edgeone.dev/

Effective URL:
https://nweb.edgeone.dev/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing page on a free hosting subdomain: a fake 'Secure Portal' login harvests email/password and JavaScript exfiltrates them to a Telegram backend. Do not enter credentials.

Risk Factors (5)
JavaScript transmits email and password to an external Telegram endpoint — definitive credential exfiltration
Login form collecting email + password behind a vague 'Secure Portal' authentication pretext
Cross-origin network call to api.db-ip.com for client fingerprinting
Hosted on a free/instant hosting-platform subdomain (nweb.edgeone.dev) with unranked, no-reputation domain
Inline script obfuscation using encoding/decoding functions
Domain age information unavailable

Details

Page Title

Email Update

Scan Type

public

Domain Name Analysis

The domain 'nweb.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'nweb'. The registrable portion 'edgeone' spans 7 characters containing four vowels alongside 3 consonants. Word splitting yields two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://nweb.edgeone.dev/

Page Load Overview

3.06s
Total Load Time
196 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:206 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.247.29Singapore
2142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
243.174.246.29Singapore
84--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13742839A56A30544B667D0E83BE767093334C017A90BCC287F9C729CCF8A6C994F23C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Vr9QkfHB/14kOgYgbt+PKxPAsGP/8Qlct829qAS7XfosG3vUkpbAoFiLi3iebUnu:VrPHB/q/F2bAoFiLi3i0UnpiXBiXg/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12715:AIgBQlRBRlITaQJEWmGKQDkBCm0AIQBmAE+zSwkM5jgQE0ckLLQEgr0SALMCjI0L0EHgCBAIigGSAoKtgIxMNtaADbSAJAL6

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f07070726bee4fc
Perceptual Hash:a721fd8976768826
Difference Hash:ffffcfcdcc700c20
Wavelet Hash:0707070727bee4fc
Color Hash:#2d8649

Other Hashes

Crop Resistant:ffffcfcdcc700c20

Scan History

Scan history not available

Unable to load historical scan data