Security Scan Report: sandbox-webpay-k3-tr-dpiximfzdskf.edgeone.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 7 domains to perform 36 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: https://sandbox-webpay-k3-tr-dpiximfzdskf.edgeone.dev/

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Unknown-age edgeone.dev subdomain named like a 'webpay' sandbox, using an anime/game IP title with top-up/coupon copy; no credential or payment form confirmed, so risk is moderate, not confirmed phishing.

Risk Factors (4)
Unknown-age subdomain on a free hosting platform (edgeone.dev) with no reputation and no published creation date
Hostname contains 'webpay' and 'sandbox', implying a payment processor brand that is not the site's
Uses a third-party game/anime IP name ('Jüjutsu Kaisen') on a domain with no apparent rights or affiliation, alongside price/VAT/coupon copy
Inconsistent page state — login prompt mixed with 'currently unavailable' maintenance text
Safety Factors (5)
No password, disguised-password or payment fields detected in the DOM
No JavaScript malware patterns, no YARA high-precision hits, no known malicious kit in the roster
No network IDS alerts and no Google Safe Browsing / content-malware indicator
Threat-intel hits are generic abuse-reputation tags on the hosting IPs only (single-source, unverified) and describe the address, not this page's content
No credential exfiltration; cross-origin requests are common third-party analytics/CDN
Domain age information unavailable

Details

Page Title

Jüjutsu Kaisen: Alan Savaşı

Scan Type

public

Domain Name Analysis

The domain 'sandbox-webpay-k3-tr-dpiximfzdskf.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'sandbox-webpay-k3-tr-dpiximfzdskf'. Its registrable label 'edgeone' stretches across 7 characters split between four vowels and three consonants. Splitting it apart reveals two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sandbox-webpay-k3-tr-dpiximfzdskf.edgeone.dev/

Page Load Overview

1.94s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:48%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:304 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as tr

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
643.174.246.29Singapore
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.127.84Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3172.67.166.179Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33.167.227.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
343.174.247.29Singapore
3104.21.11.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3611--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14113B926A4422538B41BC6F9B094B2DEB163D203D9FBD9FAF2F93638DFC59901561309

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:L9tOE6d6l3jE/c9RT2roac8WCse9tLnsSOfpBJnMGxCXP7g5j:L9tOE6d6l3jE/c9RT2roake9hnsSOfph

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42380:ACSKZQHOQEQQBEgMOLYtKQEACXgCSNABAkIqgwBoZQCcBSQBuBgKOIkAo6FlHAaLlQhkINMkHCBoEMsGvIGIIHiSGHAq3QIS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f80000ffcb89ffff
Perceptual Hash:fb4140fc94949bf8
Difference Hash:28535b603b3b33c4
Wavelet Hash:a00000ffcba9cbff
Color Hash:#6ce0b1

Scan History

Scan history not available

Unable to load historical scan data