ScanMalware.com

Security Scan Report: l2ktopup-dpxny3vemyct.edgeone.dev

Submitted: Sep 11, 2026, 10:00:47 PMCompleted: Sep 11, 2026, 10:01:06 PMpubliccompleted

Summary

This website contacted 17 IPs in 3 countries across 10 domains to perform 2 HTTP transactions. The main domain is l2ktopup-dpxny3vemyct.edgeone.dev and was registered 21 years ago.

Submitted URL: https://l2ktopup-dpxny3vemyct.edgeone.dev/bast.html

AI Security Verdict

Confirmed Scam

Confidence: 80%

10
Risk Score

Page impersonates Facebook/Telegram, collects credentials via a login form on an unknown‑age, unranked subdomain – confirmed scam.

Risk Factors
Brand impersonation of major services (Facebook, Telegram)
Credential collection form on unknown‑age, unranked subdomain
Shared‑hosting subdomain (potentially newly created)
Multiple external CDN resources (cdn.jsdelivr.net, fonts.googleapis.com, etc.)
Domain age information unavailable

Details

Page Title

App Name

Scan Type

public

Language

🇺🇸

English

(54% confidence)

Category

finance banking

(68%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'l2ktopup-dpxny3vemyct.edgeone.dev' is registered, featuring subdomain 'l2ktopup-dpxny3vemyct'. Its registrable label 'edgeone' stretches across 7 characters with 4 vowels and 3 consonants. Word splitting yields 2 words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://l2ktopup-dpxny3vemyct.edgeone.dev/bast.html

Page Load Overview

1.50s
Total Load Time
20
HTTP Requests
10
Domains
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:54%
Script Type:Latin
HTML Lang Attribute:bn
Text Length:1,151 chars
Detector Agreement:100%
Language mismatch: Declared as bn but detected as en

Website Classification

Primary Category

finance banking68% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
68%
cryptocurrency blockchain
33%
technology software
32%
social media network
30%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.247.29Singapore
AS139341ACE
145.43.142.2United Kingdom
AS16276OVH SAS
145.43.142.5United Kingdom
AS16276OVH SAS
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2017--

Page Statistics

20
Requests
10
Unique Domains
401.6 KB
Total Size

Detected Technologies2

Tailwind CSS
30%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EBD0A7875CE0585809A0A6951CD0F11C0DE9595E67418E40BCCD60791F897A649C3558

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:PouVWJhqivYl/iCsAAbHblu+FYBzO907vXUvbNQODLvj6vavvAI9kBbZWM:h4hqKYvfAbpli7vkjvjVvVuB9d

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:b6109c3da81082efb0c0a4ebad083db1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:a6cc9933cccc3399
Difference Hash:0000080c0c4d000c
Wavelet Hash:fcfce4e4e4e4c0c0
Color Hash:#c5b287

Other Hashes

Crop Resistant:0000080c0c4d000c

Scan History

Scan history not available

Unable to load historical scan data