Security Scan: Webmail Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e8d45680-fa95-4db1-9975-9b2f50c423ce Domain and IP registration (RDAP)/api/v1/rdap/e8d45680-fa95-4db1-9975-9b2f50c423ceHow often this domain was scanned/api/v1/domain/stats/shiny-octo-pancake-jnr-dpxs36pdbgzg.edgeone.dev Scan history for this domain/api/v1/domain/history/shiny-octo-pancake-jnr-dpxs36pdbgzg.edgeone.dev?limit=15

This website contacted 8 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: https://shiny-octo-pancake-jnr-dpxs36pdbgzg.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'Webmail Portal' on a throwaway edgeone.dev subdomain that asks for an email password only and pipes stolen input to a Telegram bot via an inline script — a live credential-phishing page.

Risk Factors (5)

Credential-harvesting password form on an untrusted free-hosting subdomain

Password field with no accompanying username field (orphan credential capture)

Telegram bot token embedded in an inline script for credential exfiltration

Generic 'Webmail Portal' impersonation of an email login service without any legitimate provider identity

Deceptive hostname (random string subdomain on a shared developer platform)

Domain age information unavailable

Details

Page Title

Webmail Portal

Scan Type

public

Domain Name Analysis

Domain 'shiny-octo-pancake-jnr-dpxs36pdbgzg.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'shiny-octo-pancake-jnr-dpxs36pdbgzg'. The core label 'edgeone' covers 7 characters split between four vowels and 3 consonants. Word splitting yields two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.68s

Total Load Time

136 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:60%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ko

Text Length:170 chars

Detector Agreement:100%

Language mismatch: Declared as ko but detected as ru

Website Classification

Primary Category

government public service42% confidence

Type: static

Method: ml+structural

All Detected Categories

government public service

42%

news media journalism

35%

adult content

32%

phishing scam

32%

healthcare medical

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	43.174.247.29	Singapore	AS139341ACE
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	43.174.246.29	Singapore	AS139341ACE
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
8	8	-	-