Security Scan Report: separate-apricot-hbdffwuz.edgeone.dev

Submitted: Sep 19, 2026, 3:51:23 AMCompleted: Sep 19, 2026, 3:51:44 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed credential-phishing page: fake CAPTCHA on a disposable edgeone.dev subdomain harvests email/password and exfiltrates them to a Telegram bot; domain flagged as phishing by two feeds.

Risk Factors
Credential-harvesting form (email + password) behind a fake human-verification CAPTCHA
Exfiltration of submitted data to an external Telegram bot API endpoint with embedded bot token
Primary domain flagged as phishing by two independent threat-intel feeds
Deceptive 'not a robot' verification UI used to legitimize credential entry
Free instant-publishing subdomain with no verifiable age or reputation
Domain age information unavailable

Details

Page Title

Sign In.

Scan Type

public

Domain Name Analysis

Domain 'separate-apricot-hbdffwuz.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'separate-apricot-hbdffwuz'. Its registrable label 'edgeone' stretches across 7 characters split between four vowels and 3 consonants. Word splitting yields two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://separate-apricot-hbdffwuz.edgeone.dev/

Page Load Overview

1.22s
Total Load Time
116 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:240 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
59%
technology software
58%
cryptocurrency blockchain
52%
healthcare medical
38%
adult content
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
343.174.247.29Singapore
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
143.174.246.29Singapore
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.127.104Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1210--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A1D1C62085F9003EB253C0A878F0BA459A66C54BDB9609597ABE36D16FCFD4609337DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Tw7UGL6jYwDylYjTZLox1JJyCphGw/NkH+tJY:M7Uq6jfD9jTZLox1JJywN+KJY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6271:AAHKQIAAGwEBACRBEUkiig7AQEFECEaAJBBcSwhaAD4ACGBgUARJKAAywgoi8AwACAhBABAuqQACAIAAGT4qAghIgiaCQhQd

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3ffffffffff
Perceptual Hash:b13146cece9b9931
Difference Hash:00161e0000000000
Wavelet Hash:3b03033f0f0f0f0f
Color Hash:#bf4048

Other Hashes

Crop Resistant:00161e0000000000

Scan History

Scan history not available

Unable to load historical scan data