Security Scan Report: dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 3 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed credential-phishing page impersonating Spotify, with password exfiltration to an external worker domain and anti-analysis blocking.

Risk Factors (5)
Brand impersonation of Spotify on an unrelated hosting-platform subdomain
Credential exfiltration to an external worker domain
Anti-analysis JavaScript blocks DevTools and right-click
Single-source phishing threat-intel report on the primary domain
Unranked domain on shared hosting platform with unknown subdomain age
Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' is registered and includes subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. The core label 'edgeone' covers 7 characters containing 4 vowels alongside three consonants. It segments into 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

=) Willkommen zurA'%ck E-Mail oder Benutzername oder Mit Telefonnummer fortfahren Mit Google fortfahren Mit Facebook fortfahren Mit Apple fortfahren Haben Sie noch kein Konto? k CAPTCHA 7 Dat...

Page Load Overview

0.96s
Total Load Time
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,730 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media33% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.247.29Singapore
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.5United Kingdom
AS16276OVH SAS
143.174.246.29Singapore
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.3United Kingdom
AS16276OVH SAS
145.43.142.2United Kingdom
AS16276OVH SAS
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
98--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD53B96632F2093509E792FA73D29F887625C183DD0BC529BA6C85019F83ED1AD637DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:s5hnUjr9r+WbQYWGsg7LO57557CT957kX57toOCkAmVIqEJGmyqiLI8MnjhUXARK:ihIsCLObS9KXXoNxC8njhptMgXJN4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62252:AAjsEMAITVeYIkciAhCEAAoC5ia8mJh6JC0LMAUIlAmwQASBh6QJ9YRIFcklEGRM6SQXrAMNCAEQ2CCAERCiMECPRAQgAUBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901
Perceptual Hash:88cd337331592677
Difference Hash:153131b331313131
Wavelet Hash:0d3d3f3f19191919
Color Hash:N/A

Other Hashes

Crop Resistant:1531313331313111

Scan History

Scan history not available

Unable to load historical scan data