Security Scan Report: secure-indigo-arkgpwp4-dplmpiyt172l.edgeone.dev

Site favicon
Submitted: Oct 3, 2026, 12:27:59 PMCompleted: Oct 3, 2026, 12:28:37 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Fake Zimbra webmail sign-in page on a free edgeone.dev subdomain that captures usernames and passwords and posts login data to an unrelated pages.dev host — a credential-phishing impersonation of Zimbra. Do not enter credentials.

Risk Factors (4)
Impersonation of Zimbra's brand and login interface on a non-official, free-hosting subdomain (edgeone.dev) with no affiliation to Zimbra.
Credential-harvesting login form (password + username fields) on a page impersonating another entity's brand.
Cross-origin POST of page data (login-related) to an unrelated external host on pages.dev.
Inline JavaScript using encoding/decoding and crypto APIs alongside credential handling.
Domain age information unavailable

Details

Page Title

Zimbra Web Client Sign In

Scan Type

public

Domain Name Analysis

You're looking at domain 'secure-indigo-arkgpwp4-dplmpiyt172l.edgeone.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'secure-indigo-arkgpwp4-dplmpiyt172l'. The core label 'edgeone' covers 7 characters holding 4 vowels versus 3 consonants. It segments into two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://secure-indigo-arkgpwp4-dplmpiyt172l.edgeone.dev/

Page Load Overview

5.78s
Total Load Time
409 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:938 chars
Detector Agreement:67%

Website Classification

Primary Category

forum community discussion68% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

forum community discussion
68%
technology software
42%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.246.29Singapore
2103.63.106.194Vietnam
AS45903CMC Telecom Infrastructure Company
2104.37.183.1United States
AS23393NuCDN LLC
63--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18422F819046B4E32025311E5B897E148A0EF9C77A101D88DFC7F4B996F82ED966263A9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:xaNiQM3fyco66WLRtKJ++tLVJAqUhVJ6gw+aoN9sQL0HUZ8iQPxn6ov/EDCqNyO:0iNyco66WLD+tLVJAqUhVJ6gw+aoNHw8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10072:rC0rIxQMiSQWry0NIgMhQUwkyPINBhRXAQaIGAAoQqAEKAQAKXCJw00hDIRqADEM8AARUASARlURFkIpmBZBLF5BGE0FQoaE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7c3c3e7ffffe7
Perceptual Hash:b3b3cccc22339966
Difference Hash:224d4d4d4d32040c
Wavelet Hash:ffe7e7c3c3270000
Color Hash:#c58799

Scan History

Scan history not available

Unable to load historical scan data