ScanMalware.com

Security Scan Report: estimated-chocolate-lc7hvywz-dpan3fgrmhlz.edgeone.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/73bba8e3-f322-4727-8006-3bf5fdeb64ebDomain and IP registration (RDAP)/api/v1/rdap/73bba8e3-f322-4727-8006-3bf5fdeb64ebHow often this domain was scanned/api/v1/domain/stats/estimated-chocolate-lc7hvywz-dpan3fgrmhlz.edgeone.devScan history for this domain/api/v1/domain/history/estimated-chocolate-lc7hvywz-dpan3fgrmhlz.edgeone.dev?limit=15
This website contacted 8 IPs in 4 countries across 6 domains to perform 54 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://estimated-chocolate-lc7hvywz-dpan3fgrmhlz.edgeone.dev/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Fake 'Kimi 内核' official site on a random edgeone.dev subdomain, pushing a game-cheat APK with ESP overlay and anti-detection, and telling users to override browser file warnings. Brand impersonation plus malware-style distribution.

Risk Factors (5)
Brand impersonation: claims official status for the 'Kimi' brand on an unrelated edgeone.dev subdomain
Random free shared-hosting subdomain with unknown creation date and no domain reputation
Promotes an Android APK described as a game cheat with ESP overlay and 'native parasitic' anti-detection
Instructs visitors to ignore/override browser file-safety warnings
No verifiable company identity — contact is a bare QQ group number
Domain age information unavailable

Details

Page Title

Kimi 内核 · 官方网站 | Android 版下载

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'estimated-chocolate-lc7hvywz-dpan3fgrmhlz.edgeone.dev' is registered and includes subdomain 'estimated-chocolate-lc7hvywz-dpan3fgrmhlz'. The registrable portion 'edgeone' spans 7 characters containing 4 vowels alongside 3 consonants. Word splitting yields 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

iE — KIRAN aiaisthzcH &. Kimi AK, BA Android #735. — MWA, WES SBE ZGE.SRESPR RM, REAR! =a - CRA, sHtFA. BSAA, —RNHEARE. 4 Oo RE Kiai AE RURAL DIR Stee Set ee BAC OSes SEAR LOT. Pants

Page Load Overview

3.83s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:653 chars
Detector Agreement:75%

Website Classification

Primary Category

download file sharing94% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
94%
technology software
77%
documentation technical
36%
adult content
30%
government public service
29%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1243.174.247.29Singapore
AS139341ACE
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6195.201.128.178Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
6180.76.198.225China
AS58540Jinan,250000
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
643.174.246.29Singapore
AS139341ACE
6159.69.246.187Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
6112.45.27.154China
AS139080The Internet Data Center of Sichuan Mobile Communication Company Limited
548--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12DF2F92232B4147AB063A7D8B7D7675D3235D003D609846D3ADC0694CF8EBE598F3ADA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:DpICF4s785yDIVI8orHlGH+olWaG1OkoHCUknuv2:D+CFp785yDIVI8orHlGH+WIOkoHVknuO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34506:GDAI1UgIQUSCMjA4DjOQgMTuN3gAAxkI+eACCzCR8QMrOQgJFAC5iRjIIAGeAIghGJsQjEF2BAlgEKjTQuKIAGRgMB5gIUMB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fde7c7e7e7e7e7ff
Perceptual Hash:b363cccbc9193833
Difference Hash:234c0d0c4a0c4c26
Wavelet Hash:80e6c2c3c3e7e783
Color Hash:N/A

Other Hashes

Crop Resistant:234c0d0c4a0c4c26,76d795de96b6d4de

Scan History

Scan history not available

Unable to load historical scan data