Security Report: fil-eggen-dpt6n0jn28p0.edgeone.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8db412f5-1935-420f-9730-a377480335df Domain and IP registration (RDAP)/api/v1/rdap/8db412f5-1935-420f-9730-a377480335df Certificate Transparency/api/v1/ct/fil-eggen-dpt6n0jn28p0.edgeone.dev How often this domain was scanned/api/v1/domain/stats/fil-eggen-dpt6n0jn28p0.edgeone.dev Scan history for this domain/api/v1/domain/history/fil-eggen-dpt6n0jn28p0.edgeone.dev?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 11 HTTP transactions. The main domain is fil-eggen-dpt6n0jn28p0.edgeone.dev and was registered 23 years ago.

Submitted URL: https://fil-eggen-dpt6n0jn28p0.edgeone.dev/?authorize?client_id=-

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Disposable edgeone.dev subdomain hosting a fake 'example.com Mail Authentication' portal that harvests email/password and can exfiltrate them via an embedded Telegram bot token; phishing IoC confirms.

Risk Factors (7)

Credential-harvesting login form (1 password field, 1 email/username field) on a hosting-platform subdomain

Brand-impersonating 'example.com Mail Authentication' portal on a domain that is not example.com

Telegram bot token embedded in inline JavaScript enabling credential exfiltration

Cross-origin POSTs to ipapi.co and api.ipify.org for victim profiling

Phishing threat-intel hit on the primary domain and actor-abused-service IDS alerts

Programmatic, randomly-generated subdomain (fil-eggen-dpt6n0jn28p0) typical of disposable phishing infrastructure

Page text attempts to characterize itself as harmless documentation to mislead reviewers

Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain name 'fil-eggen-dpt6n0jn28p0.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'fil-eggen-dpt6n0jn28p0'. The core label 'edgeone' covers 7 characters split between four vowels and 3 consonants. Splitting it apart reveals 2 words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

12.54s

Total Load Time

482 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:398 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

75%

government public service

34%

documentation technical

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	43.174.247.29	Singapore	AS139341ACE
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	100.60.230.143Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.251.156.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.105Google · CDN	United States	AS15169Google LLC
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	100.61.51.65Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.250.154.104Google · CDN	United States	AS15169Google LLC
11	9	-	-