Security Scan Report: basic-plum-tcsewvmy-dp96mj7jb2n6.edgeone.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 5 domains to perform 154 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://basic-plum-tcsewvmy-dp96mj7jb2n6.edgeone.dev/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Cloned Instagram page on a throwaway edgeone.dev subdomain, wearing Instagram's favicon and interface; IDS flags it as an Instagram phishing landing. No credential fields were captured, but brand impersonation alone warrants HIGH_RISK.

Risk Factors (4)
Favicon brand impersonation of Instagram on a non-Instagram host
Network IDS HIGH alerts for cloned Instagram phishing landing
Full visual/UI cloning of Instagram's interface on a disposable platform subdomain
Brand name and footer claimed on a domain with no relationship to Meta
Domain age information unavailable

Details

Page Title

(2) Instagram

Scan Type

public

Domain Name Analysis

Domain 'basic-plum-tcsewvmy-dp96mj7jb2n6.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'basic-plum-tcsewvmy-dp96mj7jb2n6'. Count 7 characters in 'edgeone' with four vowels and three consonants. Breaking it apart gives two words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://basic-plum-tcsewvmy-dp96mj7jb2n6.edgeone.dev/

Page Load Overview

16.20s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-br
Text Length:1,493 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2243.174.246.29Singapore
22157.240.0.63Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
22157.240.0.174Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
22200.199.35.161Belo Horizonte, Minas Gerais, Brazil
AS7738V tal
2243.152.29.149Singapore
2243.174.247.29Singapore
2243.152.26.142Singapore
1547--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T171757C11A609DC3E4F1387D3D8D93C9BAA4C60177AC45CD1E0D86F6B16C37B9721BA2A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:0hW2KWQ8SKFmvJoBzkfvBf2x4Nw9wBkeEn7T+t0LnQOwWs7:ul4KFmhKkvN2kwGBJM5nZ6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1671436:GgqARt4IFhAASQETcigGRYQuKaijYoALNAoEx0QKAQQoZAhmTGknDUxoYAK5nCZgNRQaAAuVCDUUIIAZHSzkAJICBmQBDAoI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181810101010101
Perceptual Hash:ffffaa000000aaff
Difference Hash:4141410101010101
Wavelet Hash:f3f3f3f301010101
Color Hash:N/A

Other Hashes

Crop Resistant:4141410101010101

Scan History

Scan history not available

Unable to load historical scan data