ScanMalware.com

Security Scan Report: chilly-plum-c6aqw8as-dpz0gw37eqos.edgeone.dev

Submitted: Completed: publiccompleted

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Exact mirror of the Next.js/Vercel homepage hosted on an unrelated edgeone.dev subdomain, but with no login or payment form and no malware or exfiltration signals — a clone/mirror rather than an active credential phishing page.

Risk Factors (3)
Displays Next.js / Vercel branding and official-looking marketing content on a domain it does not own (edgeone.dev subdomain)
Mirrored/replicated copy of a major brand's site, the typical raw material for clone or SEO-manipulation hosting
Shared hosting-platform subdomain of unknown creation date — the namespace permits instant anonymous publishing
Safety Factors (5)
No credential, login, or payment form anywhere on the page
No credential exfiltration or cross-origin form action detected
No YARA/JavaScript malware patterns and no known phishing kit in the analyst-vetted roster
All JavaScript is served from the page's own domain; no third-party script hosts
No Google Safe Browsing or content-malware threat-intel hit
Domain age information unavailable

Details

Page Title

Next.js by Vercel - The React Framework

Scan Type

public

Domain Name Analysis

The domain name 'chilly-plum-c6aqw8as-dpz0gw37eqos.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'chilly-plum-c6aqw8as-dpz0gw37eqos'. The core label 'edgeone' covers 7 characters containing four vowels alongside 3 consonants. Word splitting yields two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chilly-plum-c6aqw8as-dpz0gw37eqos.edgeone.dev/

Page Load Overview

3.56s
Total Load Time
991 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,803 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
72%
documentation technical
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2543.174.247.29Singapore
AS139341ACE
2443.174.246.29Singapore
AS139341ACE
492--

Detected Technologies1

React
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T178748510B5F4CA26A44B96C9E7387E65AF06F1B384198954B2DC83660F46877FB4F0CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:/NYdb1SVTaQAHI1QZxxVUU+nAQ1NSQv5DaqH2GZ3I:VYwD5G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:358972:KFqhgsBKCBWHZIBoZ5JWFAAJENowgq4WEbUwCoo+QIAUCAQBCVipBAzANIkDAFOqCARggBkoAFGkQgeBlTgYBpgA0c4gLKAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcc381efe7ffffcf
Perceptual Hash:b368ccc3d3c8683b
Difference Hash:41220b0c0a001416
Wavelet Hash:888081c3e7cfffc2
Color Hash:#e06c6c

Other Hashes

Crop Resistant:41220b0c0a001416

Scan History

Scan history not available

Unable to load historical scan data