Security Report: nexuspirfsch.edgeone.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/edb190a8-32e9-4f0a-88ae-fdc8a4144fff Domain and IP registration (RDAP)/api/v1/rdap/edb190a8-32e9-4f0a-88ae-fdc8a4144fff Certificate Transparency/api/v1/ct/nexuspirfsch.edgeone.dev How often this domain was scanned/api/v1/domain/stats/nexuspirfsch.edgeone.dev Scan history for this domain/api/v1/domain/history/nexuspirfsch.edgeone.dev?limit=15

This website contacted 10 IPs in 3 countries across 6 domains to perform 12 HTTP transactions. The main domain is nexuspirfsch.edgeone.dev and was registered 13 years ago.

Submitted URL: https://nexuspirfsch.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed PayPal phishing kit on nexuspirfsch.edgeone.dev: harvests email, password, OTP and card details and exfiltrates them to Telegram — never enter credentials here.

Risk Factors (5)

Impersonation of PayPal brand on a non-PayPal, unranked hosting subdomain

Credential exfiltration to an external Telegram endpoint from client-side JavaScript

Harvests email, password, OTP code, and card details in a staged flow with fake countdown timers ('Time remaining: 05:00 minutes')

Deceptive multi-step page titled 'Login Page - Step Form with Loader and OTP' with noindex-free, no legitimate brand association

Hosted on an instant-publish platform namespace (.edgeone.dev) where the subdomain's true creation date is unknown

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

The domain name 'nexuspirfsch.edgeone.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'nexuspirfsch'. Its registrable label 'edgeone' stretches across 7 characters split between 4 vowels and 3 consonants. Segmentation suggests 2 words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.87s

Total Load Time

167 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:595 chars

Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping67% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping

67%

finance banking

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	43.174.246.29	Singapore	AS139341ACE
1	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.6	United Kingdom	AS16276OVH SAS
1	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	43.174.247.29	Singapore	AS139341ACE
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
12	10	-	-