ScanMalware.com

Security Scan Report: profitable-white-bt5lgb3w-dpjuajro8idx.edgeone.dev

Submitted: Completed: publiccompleted

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Cloned Vercel/Next.js marketing page on an unrelated random edgeone.dev subdomain, corroborated by an informational mirrored-website IDS alert. No credential or payment form, no malware; brand mismatch keeps it at moderate risk.

Risk Factors (3)
Full site mirror/clone of Vercel's Next.js property on a mismatched, unrelated hosting subdomain
Brand in title/Open Graph does not correspond to the hosting domain (cloned branding, no disclosure of mirror status)
Informational IDS alert flagging a mirrored-website phishing pattern
Safety Factors (5)
No credential, login, password or payment fields anywhere on the page (verified form facts)
Email-only newsletter form with same-origin action; no cross-origin form submission
No cross-origin credential exfiltration and no third-party script hosts
No YARA malware patterns, no known malicious kit roster match, no high-precision native-YARA hits
Threat-intel matches are generic abuse-reputation tags only — not content-malware indicators
Domain age information unavailable

Details

Page Title

Next.js by Vercel - The React Framework

Scan Type

public

Domain Name Analysis

The domain 'profitable-white-bt5lgb3w-dpjuajro8idx.edgeone.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'profitable-white-bt5lgb3w-dpjuajro8idx'. Its registrable label 'edgeone' stretches across 7 characters with four vowels and three consonants. Segmentation suggests two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://profitable-white-bt5lgb3w-dpjuajro8idx.edgeone.dev/

Page Load Overview

2.63s
Total Load Time
989 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,801 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
72%
documentation technical
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1743.174.246.29Singapore
AS139341ACE
1643.152.26.209Singapore
AS139341ACE
1643.174.247.29Singapore
AS139341ACE
493--

Detected Technologies1

React
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C516072E192643BA127C5DE7070939EB0E6C402C3976A136DFD9378CACAE939B1134C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Tm4RZc1c2IXZftTM58SVdu65WwVbqF3JqM8LbR56:Tmgkc3lXSVrhWpsMeRE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2544:EhIgEAACAQAEAECIIAGQgRIAgAAgIAgAAAIATYABYgAQAABEgAAAECBAAAARAAIAAgAAIAQKAAQsQGAABAIACAAAEEAGMAMF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b333cc8c33666699
Difference Hash:0000080c0c0c0000
Wavelet Hash:3f3f030303270f0f
Color Hash:#405bbf

Other Hashes

Crop Resistant:0000080c0c0c0000

Scan History

Scan history not available

Unable to load historical scan data