ScanMalware.com

Security Scan Report: leading-moccasin-tsv36gwu-dpscxw1qeuy7.edgeone.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6927a5b9-d9ee-4d62-8654-28b0c5b3f85bDomain and IP registration (RDAP)/api/v1/rdap/6927a5b9-d9ee-4d62-8654-28b0c5b3f85bHow often this domain was scanned/api/v1/domain/stats/leading-moccasin-tsv36gwu-dpscxw1qeuy7.edgeone.devScan history for this domain/api/v1/domain/history/leading-moccasin-tsv36gwu-dpscxw1qeuy7.edgeone.dev?limit=15
This website contacted 11 IPs in 2 countries across 8 domains to perform 17 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://leading-moccasin-tsv36gwu-dpscxw1qeuy7.edgeone.dev/

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Prank-style fake UPI payment/reward screen using unofficial NPCI/UPI branding on a free subdomain; no forms, malware or exfiltration found, so no credential theft or malware, but it can readily be misused to fool people.

Risk Factors (4)
Fake payment-receipt interface mimicking UPI/NPCI transaction notifications, a shape commonly screenshotted or forwarded to defraud third parties
UPI/NPCI verification and "powered by" branding used without any official affiliation
"Claim reward" / "direct deposit to bank account" call-to-action with no verifiable destination
Free instant-subdomain hosting with unknown page age
Safety Factors (4)
Verified form facts show 0 forms, 0 password fields and 0 payment fields — no credential or payment data is collected on this page
No hunting rule/kit-roster malware hits, no JavaScript exfiltration, no cross-origin credential handling, no IDS or Safe Browsing alerts
Threat-intel matches are two single-source generic abuse-reputation tags on the host's own addresses, not content-malware indicators, and add no weight
The page frames itself as a comedy "prank" ("100% Comedy Guaranteed", "500 Ka Babaji Ka Thullu") rather than a real payment service
Domain age information unavailable

Details

Page Title

UPI Payment Received - ₹500.00

Scan Type

public

Domain Name Analysis

Domain 'leading-moccasin-tsv36gwu-dpscxw1qeuy7.edgeone.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'leading-moccasin-tsv36gwu-dpscxw1qeuy7'. The second-level label 'edgeone' is 7 characters long containing four vowels alongside 3 consonants. Segmentation suggests 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

AMOUNT RECEIVED 2500.0090 Ref ID:UPI/93048201938/SUCCESS {8 Tap Card to Flip & Claim Reward! 500.00 Cash Unlocked CashReward b TAPTOFLIP & CLAIM {Card par tap karke 3D Flip se surprise dekho! P...

Page Load Overview

1.27s
Total Load Time
458 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:49%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:hi
Text Length:1,013 chars
Detector Agreement:100%
Language mismatch: Declared as hi but detected as en

Website Classification

Primary Category

entertainment media84% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
84%
adult content
75%
finance banking
46%
social media network
30%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
743.174.247.29Singapore
AS139341ACE
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.127.95Google · CDNUnited States
AS15169Google LLC
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.246.29Singapore
AS139341ACE
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1711--

Detected Technologies2

Tailwind CSS
30%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E403C82856B1007B6C53D1F5F696AA69F529B1C7DF2E86ADB58D4200AFC3EF34C87204

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:KhL7lXAAhvXfsYiLX3dLx/e/zzR9mzaj7lF9etFI+puNhcbeV2:KhnlXuYR9aqF9etFxq2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40031:zEAogkMBKYokCKISISgOc4hH6tUAEiFSW2AIiLgOBgVAEsoIMWhGIhgwAQOySTBEhiSBFQgEDZAAQAQiE3IeARIE5EBQFKYQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818181800
Perceptual Hash:cccc663933333363
Difference Hash:32b232323232b232
Wavelet Hash:d8d8d8d81b1b1b1b
Color Hash:N/A

Other Hashes

Crop Resistant:32b232323232b232

Scan History

Scan history not available

Unable to load historical scan data