Security Scan Report: welcome-ivory-mla3tpma-dpgbipy9x8sc.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 3 domains to perform 4 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: https://welcome-ivory-mla3tpma-dpgbipy9x8sc.edgeone.dev

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed DKB banking phishing kit on an edgeone.dev subdomain: fake login plus 2FA, personal-data and card-entry steps, with JavaScript exfiltrating entered credentials off-site and anti-analysis blocking enabled.

Risk Factors (6)
Brand impersonation of a German bank on a non-official, free-hosting subdomain
Password field present in a fake banking login
Payment card fields (card number, expiry, CVV) harvested
JavaScript credential exfiltration to an external endpoint (Telegram-style sendToTelegram call)
DevTools and right-click blocking (anti-analysis) combined with credential collection
Single-source phishing report on a third-party resource loaded by the page
Domain age information unavailable

Details

Page Title

Mein Banking - DKB

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'welcome-ivory-mla3tpma-dpgbipy9x8sc.edgeone.dev' is registered and includes subdomain 'welcome-ivory-mla3tpma-dpgbipy9x8sc'. The registrable portion 'edgeone' spans 7 characters with four vowels and three consonants. Word splitting yields two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://welcome-ivory-mla3tpma-dpgbipy9x8sc.edgeone.dev

Page Load Overview

1.34s
Total Load Time
45 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:1,516 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking57% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
143.174.247.29Singapore
165.21.235.194Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
145.43.142.4United Kingdom
AS16276OVH SAS
143.174.246.29Singapore
44--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16C93D86561EB28392793A3F81BE7450E612C8003B01ACE5C7F9D539A4F46B849B77F9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:V7ayTLlm8olnaz/UeJpNl1BlrYJZeIScOYuHDev4XGXnC3xQckq/5jFPJj:Veysfl2UeJpNlh0n6mA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89767:DBSlBBABimAlMBA0AYEIACOyFNLDAh14EA4ABF+JBbAEAwOIgogEJVRx0rEJiMYcUQTAnQgIwJqY6BEgIBzhCgFgaIUCAUAG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffe7e7ffff00
Perceptual Hash:f793488d62b14c9d
Difference Hash:b22a324c4c320e21
Wavelet Hash:42fefee6e6c24200
Color Hash:#1f5393

Scan History

Scan history not available

Unable to load historical scan data