ScanMalware.com

Security Scan Report: double-lavender-fc2w8rdm-dp3ximxyf10z.edgeone.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/47cb9c03-4db1-434b-af7a-b9b95aac337fDomain and IP registration (RDAP)/api/v1/rdap/47cb9c03-4db1-434b-af7a-b9b95aac337fHow often this domain was scanned/api/v1/domain/stats/double-lavender-fc2w8rdm-dp3ximxyf10z.edgeone.devScan history for this domain/api/v1/domain/history/double-lavender-fc2w8rdm-dp3ximxyf10z.edgeone.dev?limit=15
This website contacted 12 IPs in 2 countries across 8 domains to perform 38 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://double-lavender-fc2w8rdm-dp3ximxyf10z.edgeone.dev/

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Unranked, unknown-age edgeone.dev subdomain presenting a 'CEXAWIN' phone/password/invite-code registration form and calling betting/payment API hosts. No malware or phishing-kit evidence; a gambling-style signup, so treat with caution.

Risk Factors (5)
Password field without username on a registration form (possible credential harvesting pattern)
Unknown-age subdomain on a free/instant publishing namespace (.edgeone.dev) where content can be created minutes ago
Unranked domain with no established reputation while soliciting account registration
Cross-origin API calls to unranked payment/win-branded hosts consistent with unlicensed betting operations
Title/branding mismatch suggesting a generic reused template
Safety Factors (6)
No content-malware threat-intelligence match; both IP reports are generic abuse-reputation (known attacker) tags that do not describe this page's content
No hunting rule/JavaScript malware patterns detected
No known malicious kit in the kit roster and no native-hunting rule high-precision hits
No network IDS (Suricata) alerts
No cross-origin form submission and no detected credential exfiltration; all JavaScript served from the site's own domain
Verified form facts show 0 disguised-password and 0 payment fields
Domain age information unavailable

Details

Page Title

AF TEAM

Scan Type

public

Domain Name Analysis

Domain 'double-lavender-fc2w8rdm-dp3ximxyf10z.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'double-lavender-fc2w8rdm-dp3ximxyf10z'. The core label 'edgeone' covers 7 characters containing four vowels alongside 3 consonants. Segmentation suggests two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

@ CEXAWIN} Register n o Register your phone Phone number +880 v | Please enter the phone number @ Set password Set password @ @ Confirm password Confirm password D &lnvite code 34875101331...

Page Load Overview

2.32s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:108 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network94% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
94%
technology software
63%
adult content
45%
documentation technical
45%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
543.174.247.29Singapore
AS139341ACE
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3104.21.58.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
343.174.246.29Singapore
AS139341ACE
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3172.67.200.52Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3104.18.2.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.29.18Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3812--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155B2B8F25BD3043160A3C49B36EB969E36698007940BC6083FFC91D8AFC1B56D7267AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:inpkJUVmMDKLYDMG/KvRQVaQGTN8S8eXJKhxXy75xf:GpkJUisDMMuRQVa7NlweTf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24701:gvvhqQhmo0EIZAMAggdIVIQJLWYSmKAZBF1wMkloE0CYAgUiQRSEF5DSLAwoTFckUOQgjCilOAVzgxcwzEKDEJQXIdQEkKIY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818181818
Perceptual Hash:9976666664669999
Difference Hash:32b2b2b2b2b2b2b2
Wavelet Hash:b83838383c3c3838
Color Hash:N/A

Other Hashes

Crop Resistant:32b2b2b2b2b2b2b2

Scan History

Scan history not available

Unable to load historical scan data