Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ac9e8b99-8c0c-4fa5-8792-c368805728be Domain and IP registration (RDAP)/api/v1/rdap/ac9e8b99-8c0c-4fa5-8792-c368805728beHow often this domain was scanned/api/v1/domain/stats/hq-cpanel-uptime-upgrade-hnrv61j7if.edgeone.app Scan history for this domain/api/v1/domain/history/hq-cpanel-uptime-upgrade-hnrv61j7if.edgeone.app?limit=15

This website contacted 9 IPs in 5 countries across 6 domains to perform 18 HTTP transactions. The main domain is edgeone.app and was registered 3 years 5 months ago.

Submitted URL: https://hq-cpanel-uptime-upgrade-hnrv61j7if.edgeone.app/webmail.html

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake cPanel webmail login on a throwaway edgeone.app subdomain that harvests email/password and exfiltrates it to a Telegram bot and a third-party endpoint. Confirmed credential phishing.

Risk Factors (5)

Brand impersonation of cPanel webmail on an unrelated hosting-platform subdomain

Credential-harvesting login form (password + email fields) on a deceptive hostname

Telegram bot token in page script enables direct exfiltration of submitted data

Cross-origin POST to an unrelated/third-party domain (fitsproductions.com.au) acting as a credential sink

Free instant-publishing subdomain with unknown/untraceable creation date and no domain reputation

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

Domain 'hq-cpanel-uptime-upgrade-hnrv61j7if.edgeone.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'hq-cpanel-uptime-upgrade-hnrv61j7if'. The second-level label 'edgeone' is 7 characters long containing four vowels alongside three consonants. Segmentation suggests 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.71s

Total Load Time

87 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,434 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software39% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

39%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	101.33.10.10	Frankfurt am Main, Hesse, Germany	AS139341ACE
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	195.181.170.18Datacamp · CDN	Frankfurt am Main, Hesse, Germany	AS60068Datacamp Limited
2	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	190.183.195.2	Bella Vista, Corrientes, Argentina	AS20207Gigared S.A.
2	45.43.142.2	United Kingdom	AS16276OVH SAS
2	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	45.43.142.4	United Kingdom	AS16276OVH SAS
2	43.152.26.58	Singapore	AS139341ACE
18	9	-	-