Security Scan Report: sore-indigo-cf1xx4cwja.edgeone.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 9 HTTP transactions. The main domain is edgeone.app and was registered 3 years 6 months ago.

Submitted URL: https://sore-indigo-cf1xx4cwja.edgeone.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake 'Account Verification' login page on a disposable edgeone.app subdomain that exfiltrates entered email and password to a Telegram bot, along with the visitor's IP. Confirmed credential phishing.

Risk Factors (5)
Confirmed credential exfiltration to an external Telegram endpoint
Harvesting email/password on a disposable shared-hosting subdomain
Phishing threat-intel report on the primary domain itself
Impersonation-style generic 'Account Verification' login page with no legitimate service identity
User IP collected cross-origin and bundled with stolen credentials
Domain age information unavailable

Details

Page Title

Account Verification

Scan Type

public

Domain Name Analysis

The domain 'sore-indigo-cf1xx4cwja.edgeone.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'sore-indigo-cf1xx4cwja'. The registrable portion 'edgeone' spans 7 characters split between four vowels and three consonants. Tokenizing the label suggests two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sore-indigo-cf1xx4cwja.edgeone.app/

Page Load Overview

1.48s
Total Load Time
265 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:119 chars
Detector Agreement:50%

Website Classification

Primary Category

news media journalism30% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
30%
finance banking
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
343.174.246.29Singapore
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
143.174.247.29Singapore
97--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F382735B24F724516A93E4BC3B9F63053265E0039A09CD287F9C53488F46B99ACB37CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:6U3RWl0Kikc+3eVPHbhPRHa4sx8utqqnA65Fk619uY/cQ5uG9Rk4HyfAy+ylJjI5:uQaF6IrfsiJ6eRCIdrfQs35

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18501:SAYChCQQmwAEUbVxCCJhoINCQAAbECMIaDIih0GAJPwgYWQABAlA4Rs3MBKxtz2JCcdAC9IEoAGEFQjIIDKQAKJCIwIEkgAV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818180018000000
Perceptual Hash:9999cc6666333399
Difference Hash:32b2b24c300c0000
Wavelet Hash:38383c24fcfccccc
Color Hash:N/A

Other Hashes

Crop Resistant:32b2b24c300c0000

Scan History

Scan history not available

Unable to load historical scan data