Security Scan Report: dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 3 countries across 3 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Spotify login on a free-hosting subdomain that harvests email/password and exfiltrates them to an external workers.dev server, with DevTools blocking. Confirmed phishing kit — do not enter credentials.

Risk Factors (5)
Brand impersonation of Spotify on a non-official, unranked domain
Credential/password harvesting form with cross-domain exfiltration of email and password
Anti-analysis JavaScript (DevTools and right-click blocking) alongside credential theft
Untrusted hosting-platform subdomain of unknown creation date (edgeone.dev tenant)
Single-source threat-intel phishing report on the scanned domain
Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

The domain name 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. Count 7 characters in 'edgeone' split between four vowels and three consonants. Tokenizing the label suggests two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

=) Willkommen zurA'%ck E-Mail oder Benutzername oder Mit Telefonnummer fortfahren Mit Google fortfahren Mit Facebook fortfahren Mit Apple fortfahren Haben Sie noch kein Konto? k CAPTCHA 7 Dat...

Page Load Overview

1.63s
Total Load Time
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,730 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media33% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
543.174.246.29Singapore
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.4United Kingdom
AS16276OVH SAS
145.43.142.2United Kingdom
AS16276OVH SAS
145.43.142.3United Kingdom
AS16276OVH SAS
95--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE53B96632F2093509E792FA73D29F887625C183DD0BC529BA6C85019F83ED1AD637DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:o5hnUjr9r+WbQYWGsg7LO57557CT957kX57toOCkAmVIqEJGmyqiLI8MnjhUXARK:2hIsCLObS9KXXoNxC8njhptMgXJN4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62267:CclTAB1TFAC8KQAlBYQKxq6Ug0HREBCwQAjr14FK0QBMsKBgAAJVAQSBEBHWAkoIEkQN4AII1BCypjAqhgAAaFAASA8IFKxc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901
Perceptual Hash:88cd337331592677
Difference Hash:153131b331313131
Wavelet Hash:0d3d3f3f19191919
Color Hash:N/A

Other Hashes

Crop Resistant:1531313331313111

Scan History

Scan history not available

Unable to load historical scan data