Security Report: fil-eggen-dpvjc5c11bs7.edgeone.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/56911d3c-ba20-43f9-bc32-6d759b8f4237 Domain and IP registration (RDAP)/api/v1/rdap/56911d3c-ba20-43f9-bc32-6d759b8f4237 Certificate Transparency/api/v1/ct/fil-eggen-dpvjc5c11bs7.edgeone.dev How often this domain was scanned/api/v1/domain/stats/fil-eggen-dpvjc5c11bs7.edgeone.dev Scan history for this domain/api/v1/domain/history/fil-eggen-dpvjc5c11bs7.edgeone.dev?limit=15

This website contacted 10 IPs in 2 countries across 7 domains to perform 11 HTTP transactions. The main domain is fil-eggen-dpvjc5c11bs7.edgeone.dev and was registered 23 years ago.

Submitted URL: https://fil-eggen-dpvjc5c11bs7.edgeone.dev/?authorize?client_id=-

AI Security Verdict

Confirmed Scam

Confidence: 85%

Risk Score

Phishing page on a free edgeone.dev subdomain posing as example.com mail authentication; it collects a password, profiles visitors via IP-geolocation APIs, and loops fake authentication errors.

Risk Factors (5)

Credential (password) capture form on a page claiming to authenticate a third party's mail service

Impersonation of example.com as a 'Secure Portal' on a non-example.com domain

Free/instant hosting subdomain of unknown age used for a login page

JavaScript posts to external IP-geolocation services (ipapi.co, api.ipify.org) to profile visitors

Deceptive false 'authentication error' retry loop designed to re-collect credentials

Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain 'fil-eggen-dpvjc5c11bs7.edgeone.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'fil-eggen-dpvjc5c11bs7'. The core label 'edgeone' covers 7 characters with 4 vowels and 3 consonants. Tokenizing the label suggests two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.02s

Total Load Time

347 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:401 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

75%

government public service

32%

documentation technical

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	43.174.246.29	Singapore	AS139341ACE
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	52.6.161.198Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.251.150.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.147Google · CDN	United States	AS15169Google LLC
1	43.174.247.29	Singapore	AS139341ACE
1	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.152.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.103Google · CDN	United States	AS15169Google LLC
11	10	-	-