Security Scan Report: formidable-ivory-hy7ukyrb.edgeone.dev

Redirected to:
https://formidable-ivory-hy7ukyrb.edgeone.dev/
Site favicon
Submitted: Oct 1, 2026, 1:45:27 PMCompleted: Oct 1, 2026, 1:46:37 PMpubliccompleted

This website contacted 3 IPs in 2 countries across 2 domains to perform 25 HTTP transactions. The main domain is formidable-ivory-hy7ukyrb.edgeone.dev and was registered 25 years ago.

Submitted URL: http://formidable-ivory-hy7ukyrb.edgeone.dev/

Effective URL:

https://formidable-ivory-hy7ukyrb.edgeone.dev/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Fake Roundcube Webmail login on a random edgeone.dev subdomain, flagged for phishing, with a credential form and a cross-origin POST to an unrelated 'validate' endpoint. A credential-harvesting phishing page.

Risk Factors (5)
Phishing threat-intel hit on the primary domain (content-malware category)
Credential login form on a platform subdomain with no legitimate mail service
Cross-origin POST to an unrelated third-party endpoint with a '/validate' path typical of phishing kit exfiltration
Impersonation of the Roundcube Webmail login interface
Free hosting subdomain with random, non-descriptive naming
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Domain Name Analysis

The domain 'formidable-ivory-hy7ukyrb.edgeone.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'formidable-ivory-hy7ukyrb'. The core label 'edgeone' covers 7 characters holding 4 vowels versus three consonants. It segments into two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://formidable-ivory-hy7ukyrb.edgeone.dev/

Page Load Overview

3.50s
Total Load Time
227 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:238 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical40% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
40%
technology software
38%
news media journalism
36%
phishing scam
34%
adult content
32%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
943.174.246.29Singapore
831.147.207.62Križevci, Koprivnica-Križevci County, Croatia
AS2108Croatian Academic and Research Network
843.174.247.29Singapore
253--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A6D1B8D19D5E9DBB113201E470CFBD8884ED616EEE20F849B8BC453D2F84BB995A1394

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:1rjtGm+U6KJoCJ/dwN6Pp6jlihcvpWAwyPV0Zw4hWq/hPLSfUL:1rjtGhbEoCJ/dwsh6/vpWAwyPV0Zw2Rf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6716:wBiB0MxBhMQZwwBADRRABAiAIAgCAAQQQBkUQwVMi4BgYBKCAQwIABIAICXgAYkwAYwAECJMVIgxBKmZgwjpYoIJgBoghAgR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c3c3f7ffffffff
Perceptual Hash:b33366ccccccc931
Difference Hash:4c4d4d0c30000000
Wavelet Hash:070707270f0f0f0f
Color Hash:#acd279

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data