Security Scan Report: dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 3 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Spotify login on a free edgeone.dev subdomain that harvests passwords, card details and SMS codes and exfiltrates them to an external worker domain; DevTools blocking confirms a phishing kit.

Risk Factors (6)
Credential exfiltration to an external worker domain (CRITICAL)
Brand impersonation of Spotify on a mismatched hosting-platform subdomain
Payment card fields (number, expiry, CVV, cardholder) offered on an unrelated domain
DevTools and right-click blocking to hinder analysis
SMS/verification-code harvesting stage
Unranked domain with single-source phishing report on the primary domain
Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

The domain name 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. The second-level label 'edgeone' is 7 characters long split between 4 vowels and three consonants. Breaking it apart gives two words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

=) Willkommen zurA'%ck E-Mail oder Benutzername oder Mit Telefonnummer fortfahren Mit Google fortfahren Mit Facebook fortfahren Mit Apple fortfahren Haben Sie noch kein Konto? k CAPTCHA 7 Dat...

Page Load Overview

0.91s
Total Load Time
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,730 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network98% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
98%
technology software
75%
entertainment media
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.246.29Singapore
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.5United Kingdom
AS16276OVH SAS
143.174.247.29Singapore
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.4United Kingdom
AS16276OVH SAS
145.43.142.2United Kingdom
AS16276OVH SAS
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
98--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD53B96632F2093509E792FA73D29F887625C183DD0BC529BA6C85019F83ED1AD637DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:s5hnUjr9r+WbQYWGsg7LO57557CT957kX57toOCkAmVIqEJGmyqiLI8MnjhUXARK:ihIsCLObS9KXXoNxC8njhptMgXJN4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62252:AAjsEMAITVeYIkciAhCEAAoC5ia8mJh6JC0LMAUIlAmwQASBh6QJ9YRIFcklEGRM6SQXrAMNCAEQ2CCAERCiMECPRAQgAUBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901
Perceptual Hash:88cd337331592677
Difference Hash:153131b331313131
Wavelet Hash:0d3d3f3f19191919
Color Hash:N/A

Other Hashes

Crop Resistant:1531313331313111

Scan History

Scan history not available

Unable to load historical scan data