Security Scan: PAYPAL

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/edf05e5d-1ec3-4b32-a601-dbb284a5a5b1 Domain and IP registration (RDAP)/api/v1/rdap/edf05e5d-1ec3-4b32-a601-dbb284a5a5b1 Certificate Transparency/api/v1/ct/loud-coffee-4d8r9iuu.edgeone.dev How often this domain was scanned/api/v1/domain/stats/loud-coffee-4d8r9iuu.edgeone.dev Scan history for this domain/api/v1/domain/history/loud-coffee-4d8r9iuu.edgeone.dev?limit=15

This website contacted 10 IPs in 4 countries across 5 domains to perform 10 HTTP transactions. The main domain is loud-coffee-4d8r9iuu.edgeone.dev and was registered 21 years ago.

Submitted URL: https://loud-coffee-4d8r9iuu.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

PayPal-branded credential phishing page on an edgeone.dev subdomain: PayPal favicon and title, German login form harvesting email/phone + password, DevTools/right-click blocked, and visitor-profiling calls to IP-geolocation APIs.

Risk Factors

Brand impersonation of PayPal on an unrelated edgeone.dev subdomain

Favicon copied from PayPal to mimic the real brand

DevTools and right-click blocking to hinder inspection

Cross-origin POST calls to multiple IP-geolocation services (ipapi.co, ipinfo.io, api.db-ip.com) typical of phishing kits profiling visitors

Unknown-age subdomain on a free instant-publishing platform

Domain age information unavailable

Details

Page Title

PAYPAL

Scan Type

public

Favicon Hash

MMH3: 309020573

MD5: e1528b5176081f0ed963ec8397bc8fd3

Domain Name Analysis

The domain 'loud-coffee-4d8r9iuu.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'loud-coffee-4d8r9iuu'. Its registrable label 'edgeone' stretches across 7 characters with four vowels and 3 consonants. Breaking it apart gives two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.36s

Total Load Time

215 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:203 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

technology software54% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

54%

finance banking

43%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	43.174.246.29	Singapore	AS139341ACE
1	104.17.207.24Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	116.202.166.112	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
1	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.208.24Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
10	10	-	-