Security Scan Report: dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 3 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Fake Spotify login on edgeone.dev with JavaScript exfiltrating credentials to an external worker domain; anti-analysis blocking and a phishing report confirm credential phishing.

Risk Factors (5)
Spotify-branded login page hosted on an unrelated edgeone.dev subdomain
JavaScript sends entered email/password to an external worker domain
DevTools and right-click blocking used alongside credential handling
Password field present in a login flow on a shared-hosting subdomain
Primary domain has a single-source phishing report
Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

You're looking at domain 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. The second-level label 'edgeone' is 7 characters long with 4 vowels and three consonants. Segmentation suggests two words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

Page Load Overview

0.96s
Total Load Time
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,730 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network98% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
98%
technology software
75%
entertainment media
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
343.174.247.29Singapore
143.174.246.29Singapore
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.4United Kingdom
AS16276OVH SAS
145.43.142.5United Kingdom
AS16276OVH SAS
145.43.142.2United Kingdom
AS16276OVH SAS
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
97--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD53B96632F2093509E792FA73D29F887625C183DD0BC529BA6C85019F83ED1AD637DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:s5hnUjr9r+WbQYWGsg7LO57557CT957kX57toOCkAmVIqEJGmyqiLI8MnjhUXARK:ihIsCLObS9KXXoNxC8njhptMgXJN4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62252:AAjsEMAITVeYIkciAhCEAAoC5ia8mJh6JC0LMAUIlAmwQASBh6QJ9YRIFcklEGRM6SQXrAMNCAEQ2CCAERCiMECPRAQgAUBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901
Perceptual Hash:88cd337331592677
Difference Hash:153131b331313131
Wavelet Hash:0d3d3f3f19191919
Color Hash:38000000e00

Other Hashes

Crop Resistant:1531313331313111

Scan History

Scan history not available

Unable to load historical scan data