ScanMalware.com

Security Scan Report: extra-cyan-zfxl6ma9.edgeone.app

Submitted: Jul 23, 2026, 4:50:35 AMCompleted: Jul 23, 2026, 4:52:26 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 5 domains to perform 2 HTTP transactions. The main domain is extra-cyan-zfxl6ma9.edgeone.app and was registered NaN years ago.

Submitted URL: https://extra-cyan-zfxl6ma9.edgeone.app/

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

Page hosts a credential‑phishing login form on an unknown‑age, unranked subdomain with malicious IP association; treat as high‑risk.

Risk Factors
Unknown domain age for subdomain
Unranked / low reputation domain
Credential collection form on a non‑official subdomain
Threat‑intel match to known malicious IP
Phishing classification by ML model
Domain age information unavailable

Details

Page Title

Web Mail

Scan Type

public

Language

🇰🇷

Korean

(60% confidence)

Category

phishing scam

(58%)

Domain Information

The domain name 'extra-cyan-zfxl6ma9.edgeone.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'extra-cyan-zfxl6ma9'. Its registrable label 'edgeone' stretches across 7 characters holding 4 vowels versus 3 consonants. Tokenizing the label suggests 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://extra-cyan-zfxl6ma9.edgeone.app/

Page Load Overview

1.29s
Total Load Time
10
HTTP Requests
7
Domains
176 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:60%
Script:Hangul
Direction:ltr

Detection Details

Language Code:ko
Detection Confidence:60%
Script Type:Hangul
HTML Lang Attribute:en
Text Length:60 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

phishing scam58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
58%
adult content
46%
government public service
38%
healthcare medical
33%
news media journalism
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
243.174.247.29Singapore
AS139341ACE
104--

Detected Technologies6

PasswordField
100%
JQueryv2.2.4
100%
Cloudflare
50%
jQuery CDN
20%
cdnjs
20%
Google Hosted Libraries
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18952C86532F70404B52340AC2FE7B38879699017AE06CC79BBDC139E8FC5A85A5E77C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:HMCVIy+SFkPaIQIQANcUmyXC8LZ8SpUiJ3z2v9ad10hP0fjKqnfIzNrlbFLCwgxm:H/SSFecb8mv9aL0h7XLlCDS9A8EU+RQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13473:iEooAmBQIOACRJBSRNOFwwlyOQyEAQRSLJiAiSAgIgJAI6oBoJQ0AApAFWRUhpViDCsAGWyihBCfSCTEgEAARYQkIZAmCwUC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbd3c3c00000000
Perceptual Hash:88cdcd3333776630
Difference Hash:717171711db10195
Wavelet Hash:ffffffff00000000
Color Hash:#ac538a

Other Hashes

Crop Resistant:717171711db10195,717179ba9e200000

Scan History

Scan history not available

Unable to load historical scan data