Security Scan Report: order-dpihckhmxrid.edgeone.dev

Redirected to:
https://order-dpihckhmxrid.edgeone.dev/
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 7 domains to perform 10 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: http://order-dpihckhmxrid.edgeone.dev/

Effective URL:
https://order-dpihckhmxrid.edgeone.dev/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Fake WeTransfer file-share page on an edgeone.dev subdomain that impersonates the WeTransfer brand and demands an email and password to 'download' files — credential phishing; do not enter any credentials.

Risk Factors (5)
Brand impersonation of WeTransfer on a non-official domain
Credential (email + password) collection form behind a fake file-download wall
Phishing report against the primary domain (single-source PhishDestroy)
Untrusted hosting-platform subdomain with unknown creation date and no domain reputation
Suspicious file names and mismatched sizes/deadline pressure ('expires in 7 days') typical of phishing lures
Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'order-dpihckhmxrid.edgeone.dev' is registered; it also runs on subdomain 'order-dpihckhmxrid'. Count 7 characters in 'edgeone' holding 4 vowels versus 3 consonants. Word splitting yields two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://order-dpihckhmxrid.edgeone.dev/

Page Load Overview

0.78s
Total Load Time
339 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:612 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
62%
download file sharing
53%
technology software
36%
documentation technical
31%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
243.174.246.29Singapore
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1208.95.112.1United States
AS53334Total Uptime Technologies, LLC
143.174.247.29Singapore
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
109--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195C543396602F44D6D73AA7FFCA42E611C14DE9FDCCAA7C80858945E17E35BB31182CA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:MkTBMXfRWZEqaNuWEO1iJD5WvLPGAoaov:MCjZEqMuWEO1iJD5Wvw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2736514:QDgEKABKai4jyEYQzQdQAGBBIoLhGsEOBIpJUYhCJMWKUBQAFBACYUozAASWjCAAEIqkQF0YgYFQEEQAkFQMRFEBIAIViATQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f0f87c7cf07270f
Perceptual Hash:b33c8dcdcc33388c
Difference Hash:febc9d8cac88cafc
Wavelet Hash:1f0f0707cf070f0f
Color Hash:#671f93

Scan History

Scan history not available

Unable to load historical scan data