Security Scan Report: dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev

Submitted: Sep 28, 2026, 4:50:18 PMCompleted: Sep 28, 2026, 4:50:59 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed Spotify phishing kit on a free edgeone.dev subdomain: it impersonates Spotify login, harvests email/password (plus card and SMS-code steps), and exfiltrates credentials to an external worker domain while blocking DevTools.

Risk Factors (5)
Credentials exfiltrated to external worker domain (telemanoca.mirokamigo4.workers.dev)
Spotify brand impersonation on non-official, unranked edgeone.dev subdomain
DevTools/right-click blocking to hinder analysis
Multi-step login + payment card + verification-code harvesting flow
Phishing threat-intel match on the primary domain
Domain age information unavailable

Details

Page Title

spotify

Scan Type

public

Domain Name Analysis

You're looking at domain 'dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'dead-coffee-vczxixdn-dpwj3cuq93cf'. The registrable portion 'edgeone' spans 7 characters containing 4 vowels alongside 3 consonants. Breaking it apart gives two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dead-coffee-vczxixdn-dpwj3cuq93cf.edgeone.dev/

Page Load Overview

8.10s
Total Load Time
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,730 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network95% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
95%
adult content
63%
entertainment media
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
143.174.246.29Singapore
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.7United Kingdom
AS16276OVH SAS
143.174.247.29Singapore
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.3United Kingdom
AS16276OVH SAS
145.43.142.5United Kingdom
AS16276OVH SAS
145.43.142.2United Kingdom
AS16276OVH SAS
145.43.142.6United Kingdom
AS16276OVH SAS
99--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE53B96632F2093509E792FA73D29F887625C183DD0BC529BA6C85019F83ED1AD637DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:o5hnUjr9r+WbQYWGsg7LO57557CT957kX57toOCkAmVIqEJGmyqiLI8MnjhUXARK:2hIsCLObS9KXXoNxC8njhptMgXJN4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62267:CclTAB1TFAC8KQAlBYQKxq6Ug0HREBCwQAjr14FK0QBMsKBgAAJVAQSBEBHWAkoIEkQN4AII1BCypjAqhgAAaFAASA8IFKxc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119191919191901
Perceptual Hash:88cd337331592677
Difference Hash:153131b331313131
Wavelet Hash:0d3d3f3f19191919
Color Hash:#b3e06c

Other Hashes

Crop Resistant:1531313331313111

Scan History

Scan history not available

Unable to load historical scan data