ScanMalware.com

Security Scan Report: shallow-tomato-xjlmf0s2-dpscf52wkad8.edgeone.dev

Submitted: Oct 4, 2026, 9:00:39 AMCompleted: Oct 4, 2026, 9:01:36 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Anonymous edgeone.dev subdomain running a 'FALCON VIP' betting/lottery app (WinGo API, +880 registration, invite code). No phishing kit or malware found, but unvetted gambling scheme on an unknown-age host — treat with caution.

Risk Factors (4)
Gambling/betting app pattern (WinGo lottery API, invite code, VIP branding) promoted from an anonymous free-subdomain host
Registration form captures phone number and password on a platform tenant of unknown age
Two single-source, unverified threat-intel matches on the site's network and a third-party sub-resource address (generic abuse-reputation, not content malware)
Unranked domain with no established reputation, hosted on a namespace anyone can publish to
Domain age information unavailable

Details

Page Title

FALCON VIP 🦅

Scan Type

public

Domain Name Analysis

You're looking at domain 'shallow-tomato-xjlmf0s2-dpscf52wkad8.edgeone.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'shallow-tomato-xjlmf0s2-dpscf52wkad8'. The registrable portion 'edgeone' spans 7 characters with four vowels and three consonants. It segments into two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shallow-tomato-xjlmf0s2-dpscf52wkad8.edgeone.dev/

Page Load Overview

15.06s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:137 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

government public service54% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
54%
documentation technical
52%
healthcare medical
44%
technology software
43%
news media journalism
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
643.174.247.29Singapore
AS139341ACE
343.152.29.101Singapore
AS139341ACE
343.174.246.29Singapore
AS139341ACE
3185.15.59.240United States
AS14907Wikimedia Foundation Inc.
3104.21.88.194Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3108.181.20.35Los Angeles, California, United States
AS40676Psychz Networks
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3104.18.3.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3912--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C516072E192643BA127C5DE7070939EB0E6C402C3976A136DFD9378CACAE939B1134C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Tm4RZc1c2IXZftTM58SVdu65WwVbqF3JqM8LbR56:Tmgkc3lXSVrhWpsMeRE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2544:EhIgEAACAQAEAECIIAGQgRIAgAAgIAgAAAIATYABYgAQAABEgAAAECBAAAARAAIAAgAAIAQKAAQsQGAABAIACAAAEEAGMAMF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b333cc8c33666699
Difference Hash:0000080c0c0c0000
Wavelet Hash:3f3f030303270f0f
Color Hash:#46931f

Other Hashes

Crop Resistant:0000080c0c0c0000

Scan History

Scan history not available

Unable to load historical scan data