Security Scan Report: dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev

Submitted: Sep 21, 2026, 3:50:05 PMCompleted: Sep 21, 2026, 3:50:27 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed Spotify phishing kit on a free hosting subdomain: it impersonates the Spotify login page, harvests email/password and card details, and exfiltrates credentials to an attacker-controlled worker endpoint.

Risk Factors (5)
Credential and payment-card data sent to an attacker-controlled external endpoint
Impersonation of the Spotify brand on an unrelated free-hosting subdomain
DevTools and right-click blocked to obstruct analysis
Fake multi-step flow (login → card details → SMS code) typical of a phishing kit
Free hosting subdomain (edgeone.dev) with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

The domain name 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. Its registrable label 'edgeone' stretches across 7 characters split between 4 vowels and 3 consonants. Segmentation suggests two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

Page Load Overview

4.46s
Total Load Time
266 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,730 chars
Detector Agreement:67%

Website Classification

Primary Category

adult content92% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
92%
healthcare medical
75%
government public service
74%
education learning
70%
documentation technical
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
143.174.246.29Singapore
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.2United Kingdom
AS16276OVH SAS
143.174.247.29Singapore
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.7United Kingdom
AS16276OVH SAS
145.43.142.8United Kingdom
AS16276OVH SAS
145.43.142.6United Kingdom
AS16276OVH SAS
145.43.142.3United Kingdom
AS16276OVH SAS
99--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12C31CCA5FCD2A4313676B6B016FFF20CAA7A548BE5049804B45D0C593FF0E998E53F88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hcdJ3Rp4MghCcjhC8hAML1SUh50P0q2yYDkMxCLXspx4AsTc5GFCS44MWHE4CGhW:S/RpbOC0CCVWSPxCLcpoCS4bOhW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1667:AEAAQAAAAAABAAAgAAEBAgAAAAFBAAACQAAAAAADAARAEAAAAUAIAAAAAAAAAAAAAAAAQAAAAAAAEoAAAAQAigAgQAACAAQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901
Perceptual Hash:88dd337329dc2633
Difference Hash:153131b331313131
Wavelet Hash:0119191919191919
Color Hash:#1f8293

Other Hashes

Crop Resistant:153131b331313111

Scan History

Scan history not available

Unable to load historical scan data