Security Scan Report: royal-vip-hacke-1-dptqqzt3pi7l.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 8 domains to perform 41 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: https://royal-vip-hacke-1-dptqqzt3pi7l.edgeone.dev/

AI Security Verdict

High Risk

Confidence: 68%

8
Risk Score

Phone/password registration page wearing TIGNICE branding on a disposable edgeone.dev subdomain, with a password-only credential form and calls to unranked payment APIs. No malware, but the brand/domain mismatch and credential capture make it unsafe to enter data.

Risk Factors (4)
Credential-collection form (password + confirm password, no username field) on a shared hosting-platform subdomain of unknown age
Brand presentation (TIGNICE) on a non-official, unranked domain
Deceptive, disposable-looking hostname containing 'hacke'
Contact with unranked cross-origin payment API (api.hgnicepayapi.com)
Domain age information unavailable

Details

Page Title

hb

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'royal-vip-hacke-1-dptqqzt3pi7l.edgeone.dev' is registered; it also runs on subdomain 'royal-vip-hacke-1-dptqqzt3pi7l'. The registrable portion 'edgeone' spans 7 characters split between 4 vowels and three consonants. Word splitting yields two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://royal-vip-hacke-1-dptqqzt3pi7l.edgeone.dev/

Page Load Overview

3.97s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:98 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network99% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
99%
forum community discussion
93%
technology software
80%
phishing scam
69%
documentation technical
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1143.174.247.29Singapore
3104.21.51.35Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
343.174.246.29Singapore
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3172.67.220.121Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3104.18.1.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.31.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4111--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9335FAD76A30C6CFC27612BE6EE774DE2640D43F149A440799C7088AF88C6DD09E79D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BZgD5pQ/sh84lI/YVvodZJIP3JpCDDDVRscHtENk6ySSkIWiiIBROIuvA+6l3OVY:YSYtr3JUocHtYyTWELJ+6l3Mgyw1Sts

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:53633:HRCMoAsCAqN8Mn6xgBuAAcwwGAWwAKCpQyAWrABSYkAQIQRM6RAwiBFB0JJZhI7RkC4GAEIcLDEkGEiTEABm6AT8UwE2AIIo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0818181818181818
Perceptual Hash:dd75777755320088
Difference Hash:50b2b3b2b2b2b3b3
Wavelet Hash:383838383b3b3b3b
Color Hash:#6ccee0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data