Security Scan: Redirection

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9140b458-afee-468a-8a8d-02d0a9b278d1 Domain and IP registration (RDAP)/api/v1/rdap/9140b458-afee-468a-8a8d-02d0a9b278d1 Certificate Transparency/api/v1/ct/image2url.com How often this domain was scanned/api/v1/domain/stats/deliberate-ivory-cam8lbls-dpcbggllim2i.edgeone.dev Scan history for this domain/api/v1/domain/history/deliberate-ivory-cam8lbls-dpcbggllim2i.edgeone.dev?limit=15

This website contacted 14 IPs in 3 countries across 12 domains to perform 45 HTTP transactions. The main domain is image2url.com and was registered 18 years ago.

Submitted URL: https://deliberate-ivory-cam8lbls-dpcbggllim2i.edgeone.dev/

Effective URL:

https://www.image2url.com/r2/default/documents/1791242319439-b40a16b9-...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Redirect chain from a random edgeone.dev subdomain to file host image2url.com serving an official-looking Brazilian visa form PDF. No forms, credentials, or malware detected; document provenance is unusual but nothing malicious was observed.

Risk Factors (2)

Official government visa document hosted on an unrelated temp-file/URL-shortening service rather than an official government domain

Content delivered through a randomized subdomain of a free hosting platform, a pattern also used for phishing-document delivery

Safety Factors (3)

All JavaScript comes from the site's own domain; the only WebAssembly module is hCaptcha

Referenced external domains include genuine Brazilian government services (formulario-mre.serpro.gov.br, barra.brasil.gov.br, vlibras.gov.br), consistent with a real government form

Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 4

Domain age information unavailable

Details

Page Title

Redirection

Scan Type

public

Favicon Hash

MMH3: 1564942248

MD5: afec87e1d5e19ac257bbfc03d9236890

Domain Name Analysis

The domain 'deliberate-ivory-cam8lbls-dpcbggllim2i.edgeone.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'deliberate-ivory-cam8lbls-dpcbggllim2i'. The core label 'edgeone' covers 7 characters split between 4 vowels and 3 consonants. It segments into 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.64s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🏳️HT

Code: ht

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:ht

Text Length:11 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	43.174.246.29	Singapore	AS139341ACE
3	161.148.116.17	Brazil	AS10954SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO
3	54.94.91.200Aws · CLOUD	São Paulo, São Paulo, Brazil	AS16509Amazon.com, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	56.126.82.66Aws · CLOUD	São Paulo, São Paulo, Brazil	AS16509Amazon.com, Inc.
3	15.229.72.199Aws · CLOUD	São Paulo, São Paulo, Brazil	AS16509Amazon.com, Inc.
3	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	54.233.173.173Aws · CLOUD	São Paulo, São Paulo, Brazil	AS16509Amazon.com, Inc.
3	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	43.174.247.29	Singapore	AS139341ACE
45	14	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D21140A72AE302812063C1B21EFBF60C2F36940B2686C6087EDEA6060F4538D91932CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hyCFzC3tnaJfVzw7UNEXdjekwRdQFn+9NGH+3f2rmKj:XJqUaXdKzdQFnF3rZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1060:BAAAAAAAAAAQAAAIBEABAAAAAAAAgAAACAAAAAAAAACQAAgAAAAAMAAAABBAAAAEggAgAgACEAgAAAAAAAAAAAAAAAiAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3000ffffffffffff

Perceptual Hash:cb133485cbeab4b4

Difference Hash:6cd82c030a040001

Wavelet Hash:000087f8feffff00

Color Hash:#d2c679

Other Hashes

Crop Resistant:262691c061c08001,2b0c030200000000,25cac21858c8c838,0140131b83400100

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: deliberate-ivory-cam8lbls-dpcbggllim2i.edgeone.dev