ScanMalware.com

Security Scan Report: owner-rafi-vai-ai-dpwuyk0iqg3f.edgeone.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bd7a027f-96bb-470f-b486-4be64373f9acDomain and IP registration (RDAP)/api/v1/rdap/bd7a027f-96bb-470f-b486-4be64373f9acHow often this domain was scanned/api/v1/domain/stats/owner-rafi-vai-ai-dpwuyk0iqg3f.edgeone.devScan history for this domain/api/v1/domain/history/owner-rafi-vai-ai-dpwuyk0iqg3f.edgeone.dev?limit=15
This website contacted 10 IPs in 2 countries across 8 domains to perform 38 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://owner-rafi-vai-ai-dpwuyk0iqg3f.edgeone.dev/

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

The page impersonates Telegram and harvests passwords on an unknown‑age subdomain, indicating a high‑risk phishing site.

Risk Factors (5)
Brand impersonation of a well‑known service (Telegram)
Credential‑harvesting form (password‑only)
Unranked / unknown‑age hosting subdomain
Dynamic JavaScript execution (eval)
Generic abuse‑reputation tag on a third‑party IP (adds no weight but noted)
Domain age information unavailable

Details

Page Title

Protected Document

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'owner-rafi-vai-ai-dpwuyk0iqg3f.edgeone.dev' is registered, featuring subdomain 'owner-rafi-vai-ai-dpwuyk0iqg3f'. Count 7 characters in 'edgeone' holding four vowels versus 3 consonants. Segmentation suggests 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

P: Loading. Withdraw fast, safe and stable TIGNICE

Page Load Overview

3.16s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:194 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network82% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
82%
documentation technical
58%
healthcare medical
57%
gambling betting
52%
adult content
46%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1143.174.247.29Singapore
AS139341ACE
3104.21.77.54Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
3104.18.28.18Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.0.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.204.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.1.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18814531E93294EBF532EAFCE4D766F5CCC8B0D104154EA79F8AAF08A720C948E273551

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:tsM6pceylTEVkGLyR4dAYaj+T4TehCjsiOL+zknAu3+WDFU:8qojjXPU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:194859:hGQEEiZIxFYAFAEiRAxA5IWrdnk05aSFgBBOZYThDCiAhOIFBNDIigYYiwEBEKJICAYIolQHAQkBACBEkoihAGiADIqYgMhK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1824000018181818
Perceptual Hash:887789d9cc8cdd89
Difference Hash:2a2a2a28b2b2b3b3
Wavelet Hash:382010103f3f3f3f
Color Hash:N/A

Other Hashes

Crop Resistant:2a2a2a28b2b2b3b3,6971737161517169,c646656c65264d0e

Scan History

Scan history not available

Unable to load historical scan data