Security Scan: Web Mail

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9d468b62-2d60-4fab-b1fb-474e4bd108fb Domain and IP registration (RDAP)/api/v1/rdap/9d468b62-2d60-4fab-b1fb-474e4bd108fb Certificate Transparency/api/v1/ct/mypmgrca-dpq4xiqwj2ki.edgeone.dev How often this domain was scanned/api/v1/domain/stats/mypmgrca-dpq4xiqwj2ki.edgeone.dev Scan history for this domain/api/v1/domain/history/mypmgrca-dpq4xiqwj2ki.edgeone.dev?limit=15

This website contacted 9 IPs in 3 countries across 6 domains to perform 10 HTTP transactions. The main domain is mypmgrca-dpq4xiqwj2ki.edgeone.dev and was registered 8 years ago.

Submitted URL: http://mypmgrca-dpq4xiqwj2ki.edgeone.dev/

Effective URL:

https://mypmgrca-dpq4xiqwj2ki.edgeone.dev/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

Risk Score

A generic 'Web Mail' login page on a throwaway edgeone.dev subdomain whose inline script carries a Telegram bot token for credential exfiltration — a credential-phishing kit. Do not enter any login details.

Risk Factors (4)

Generic 'Web Mail' credential form on a random-string subdomain of a free hosting platform, unrelated to any real mail provider

Inline JavaScript with a Telegram bot token capable of exfiltrating submitted credentials to an external chat

External request to ipinfo.io for visitor IP lookup, a common phishing-kit logging behaviour

No brand ownership, ranking or reputation ties the domain to any mail service it purports to be

Domain age information unavailable

Details

Page Title

Web Mail

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'mypmgrca-dpq4xiqwj2ki.edgeone.dev' is registered, featuring subdomain 'mypmgrca-dpq4xiqwj2ki'. Its registrable label 'edgeone' stretches across 7 characters containing four vowels alongside three consonants. Word splitting yields two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.82s

Total Load Time

179 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:85 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism46% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

46%

government public service

31%

healthcare medical

30%

phishing scam

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	43.174.247.29	Singapore	AS139341ACE
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	43.174.246.29	Singapore	AS139341ACE
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
10	9	-	-