Security Scan: Office Accounts & Deed Register

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ef183df0-f837-4d0f-b2f2-72e2f57c95f2 Domain and IP registration (RDAP)/api/v1/rdap/ef183df0-f837-4d0f-b2f2-72e2f57c95f2How often this domain was scanned/api/v1/domain/stats/dwmandasa-dpmht5khua8j.edgeone.dev Scan history for this domain/api/v1/domain/history/dwmandasa-dpmht5khua8j.edgeone.dev?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 5 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://dwmandasa-dpmht5khua8j.edgeone.dev/

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Self-branded internal ledger app on a free edgeone.dev subdomain with same-origin login; no impersonation, exfiltration or malware, but it publishes default passwords and an OTP master key, so treat as poorly secured, not a scam.

Risk Factors (4)

Publicly displayed default passwords for multiple named accounts (admin/admin123, hari123, shiva123) and a disclosed OTP master key on the login page

OTP verification code is auto-filled and bypassable via the published master key, defeating the second factor it advertises

Sensitive financial/deed-register records hosted on an instant shared-hosting subdomain of unknown creation age with no indication of transport/access hardening

Page advertises account-recovery via a personal Gmail address, which is weak identity practice for financial records

Safety Factors (4)

No impersonation of another organisation's brand — site displays only its own name, matching its subdomain and email

All forms are same-origin; no cross-origin form action and no credential exfiltration detected in JavaScript

No hunting rule malware patterns, no known malicious kits, no network IDS alerts, no Safe Browsing hit

Consistent single-purpose application content (ledger, transactions, reporting) typical of a small internal bookkeeping tool

Domain age information unavailable

Details

Page Title

Office Accounts & Deed Register

Scan Type

public

Domain Name Analysis

The domain 'dwmandasa-dpmht5khua8j.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'dwmandasa-dpmht5khua8j'. The second-level label 'edgeone' is 7 characters long holding four vowels versus 3 consonants. Word splitting yields two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Office Account Login Enter your credentials to manage records Username eg. admin Password eg. admin123 Login to System Forgot Reset Password? ‘dwmandasa@gmail.com 1 Admin Login: admin fadmin12...

Page Load Overview

0.73s

Total Load Time

197 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,320 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking43% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

43%

technology software

26%

e-commerce

20%

Detected Features

Payment

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	43.174.247.29	Singapore	AS139341ACE
1	142.251.157.120Google · CDN	United States	AS15169Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	3	-	-