Security Scan Report: lokk-dp8wrqsaiii2.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 6 domains to perform 7 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://lokk-dp8wrqsaiii2.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Microsoft account-verification page on a free edgeone.dev subdomain that harvests email and password and ships them to a Telegram bot; brand impersonation plus credential theft confirm a phishing scam.

Risk Factors (5)
Brand impersonation of Microsoft on an unrelated hosting-platform subdomain
Credential-harvesting login form (email + password) on the impersonating page
Telegram bot token embedded in an inline script — credential exfiltration channel
External IP/geolocation lookup (ipapi.co) used to personalize the fake verification screen
Unranked, free-hosting subdomain that could have been created minutes before the scan
Domain age information unavailable

Details

Page Title

Security verification - Microsoft account

Scan Type

public

Domain Name Analysis

The domain 'lokk-dp8wrqsaiii2.edgeone.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'lokk-dp8wrqsaiii2'. The registrable portion 'edgeone' spans 7 characters containing four vowels alongside 3 consonants. Segmentation suggests 2 words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Security verification Continue to account settings Falkenstein, Germany + 178,63.16.224 Email, phone, or Skype No account? Create onel Can't access your account? 6.2026 Microsof | P...

Page Load Overview

0.91s
Total Load Time
55 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:522 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(82%)🇩🇪de(10%)🇪🇸ca(8%)

Website Classification

Primary Category

technology software72% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
72%
documentation technical
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.246.29Singapore
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
123.194.190.163Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
135.190.3.23Google · CDNKansas City, Missouri, United States
AS396982Google LLC
123.52.181.212Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1104.26.9.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.247.29Singapore
77--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E862B53D59693A017423D05C77BAD30936777103D906C61379ED4688CF8AD9EBAB239C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:EiBIG3tgN5U1TOX8BjJ/z2SXd61w2HU6yHSMVVtyJYbBk+AJJRF6x/AjqPIjiqP6:BI+ycvbBOJJCx/A+wj1tH6g2t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15666:rECpgCCwpJ0eobiWghJECmIZOiAQANAoVQRToEShIA9S4C1gIxQAgTA1gQYIClAxuhCLZlUQMJWAUgFBZUkpOUBxIIMlgQSE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7e7fffe
Perceptual Hash:f78add2255887722
Difference Hash:0010282a4d4c3108
Wavelet Hash:03031b0bc4c4cdcc
Color Hash:070000001c0

Other Hashes

Crop Resistant:0010282a4d4c3108

Scan History

Scan history not available

Unable to load historical scan data