Security Scan Report: reddcewy-dp3b659qrun4.edgeone.app

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 1 domain to perform 1 HTTP transaction. The main domain is edgeone.app and was registered 3 years 6 months ago.

Submitted URL: https://reddcewy-dp3b659qrun4.edgeone.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Bare password-only login on a random free-hosting subdomain whose script ships a Telegram bot token for exfiltration and which performs an external IP lookup; domain and URL are flagged as phishing. Do not enter credentials.

Risk Factors (6)
Password field without a username field — credential harvesting pattern
Telegram bot token embedded in page script for exfiltration of collected data
External IP-lookup request to api.ipify.org from page JavaScript
Primary domain and URL flagged as phishing in threat intelligence (single-source, unverified)
Randomized subdomain on free/instant hosting platform, creation date unknown
Unranked domain presenting a generic branded-login look ('Logo', 'Email or phone', 'Forgotten password?', 'Terms of use')
Domain age information unavailable

Details

Page Title

MAIL

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'reddcewy-dp3b659qrun4.edgeone.app' is registered and includes subdomain 'reddcewy-dp3b659qrun4'. Count 7 characters in 'edgeone' holding four vowels versus 3 consonants. Splitting it apart reveals 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://reddcewy-dp3b659qrun4.edgeone.app/

Page Load Overview

1.15s
Total Load Time
6 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:176 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1101.33.10.10Frankfurt am Main, Hesse, Germany
043.152.26.58Singapore
12--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E192D72A267704296657E4BD37FB27053130D0136646DD69BEAC838C8F9AF9198B33CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:jgWQW3eFUFOGD558L5m6vXzW9GKDX0LszsophS:Rr3eFUFOGDo1yyszst

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20790:CKEETIhBiweZQwRkcGIYwNYNJUQAtJhGCMGgAGCAAIKyVBByGgsUrOix4MmwIBBB0xWGFA6oqREUCRgBmYYPOoYKzMCtEIQt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffef00
Perceptual Hash:cc1973665919666e
Difference Hash:314cb2b2b2340a24
Wavelet Hash:00f738381c1cff00
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data