Security Scan: spotify

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/67f8c8e2-e45d-4e05-925f-9d27be46e82c Domain and IP registration (RDAP)/api/v1/rdap/67f8c8e2-e45d-4e05-925f-9d27be46e82c Certificate Transparency/api/v1/ct/dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev How often this domain was scanned/api/v1/domain/stats/dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev Scan history for this domain/api/v1/domain/history/dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev?limit=15

This website contacted 9 IPs in 3 countries across 3 domains to perform 10 HTTP transactions. The main domain is dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev and was registered 16 years ago.

Submitted URL: http://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

Effective URL:

https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed Spotify phishing kit on a free edgeone.dev subdomain stealing login credentials and card data and exfiltrating them to an external Telegram/Workers endpoint, with DevTools blocking to evade analysis.

Risk Factors (6)

Credentials POSTed to external attacker-controlled endpoint (Telegram relay via Cloudflare Workers)

Brand impersonation of Spotify on a non-official, unranked subdomain

Password field plus card-detail fields presented as a fake login/payment verification flow

DevTools, right-click and view-source blocking to frustrate analysis

Client IP enumeration via api.ipify.org alongside exfiltration

Free instant-publishing hosting subdomain with unknown creation date

Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

Domain 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. Its registrable label 'edgeone' stretches across 7 characters split between four vowels and three consonants. Segmentation suggests 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.07s

Total Load Time

267 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,730 chars

Detector Agreement:67%

Website Classification

Primary Category

social media network96% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

96%

adult content

61%

entertainment media

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	43.174.247.29	Singapore	AS139341ACE
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.3	United Kingdom	AS16276OVH SAS
1	43.174.246.29	Singapore	AS139341ACE
1	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.6	United Kingdom	AS16276OVH SAS
1	45.43.142.4	United Kingdom	AS16276OVH SAS
1	45.43.142.8	United Kingdom	AS16276OVH SAS
1	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	9	-	-