Security Scan Report: korea-dpz0x2xlek8g.edgeone.dev

Submitted: Jul 16, 2026, 12:45:49 PMCompleted: Jul 16, 2026, 12:49:30 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 5 domains to perform 2 HTTP transactions. The main domain is korea-dpz0x2xlek8g.edgeone.dev and was registered NaN years ago.

Submitted URL: https://korea-dpz0x2xlek8g.edgeone.dev/kkr.html

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Page hosts a credential‑phishing login form, backed by a known‑malicious IP and multiple threat indicators.

Risk Factors
Unknown subdomain age
Unranked domain (not in Cisco Umbrella top 1M)
Credential collection form on a hosting‑platform subdomain
External network request to a third‑party service
Domain age information unavailable

Details

Page Title

Web Mail

Scan Type

public

Language

🇰🇷

Korean

(60% confidence)

Category

phishing scam

(58%)

Domain Information

The domain 'korea-dpz0x2xlek8g.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'korea-dpz0x2xlek8g'. Count 7 characters in 'edgeone' split between 4 vowels and three consonants. Tokenizing the label suggests 2 words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://korea-dpz0x2xlek8g.edgeone.dev/kkr.html

Page Load Overview

1.54s
Total Load Time
10
HTTP Requests
7
Domains
176 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:60%
Script:Hangul
Direction:ltr

Detection Details

Language Code:ko
Detection Confidence:60%
Script Type:Hangul
HTML Lang Attribute:en
Text Length:60 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

phishing scam58% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
58%
adult content
46%
government public service
38%
healthcare medical
33%
news media journalism
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
243.174.246.29Singapore
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
104--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16852C86532E70404B52340AC2FE7B38879699017AE06CC7DBBDC539E8FC5A85A5E73C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:HMCVIy+SFkPaIQIQANcUmyXC8LZ8SpUiJ3z2v9ad10hP0fjKqnfIzNrlbFLCwgxl:H/SSFecb8mv9aL0h7XLlCDS97U+hQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13479:iEooAmDQIGACRJBSRNOFwwhyOQyEAQBSDJiASQAgIgJAI7oBpNY0AAgAEWBUhpViDCtAGWyipBCfSATEgEEARIQkIZAmCxUA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbd3c3c00000000
Perceptual Hash:88cdcd3333776630
Difference Hash:717171711db10195
Wavelet Hash:ffffffff00000000
Color Hash:#4a1f93

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data