Security Scan Report: rook-browser-dpp5foq6zxbd.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 4 months ago.

Submitted URL: https://rook-browser-dpp5foq6zxbd.edgeone.dev/

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Self-branded 'Rook Browser' proxy tool on a free edgeone.dev subdomain. No forms, no impersonation, no malware/IDS/YARA hits; only unverified generic abuse-reputation IP tags. Low risk.

Risk Factors (2)
Hosted on a free shared publishing platform (edgeone.dev) where the subdomain's real creation date is unknown and cannot be verified
Functions as a web-proxy/browser-in-browser that can be used to bypass network filtering
Safety Factors (4)
No forms, no password fields, no payment fields — no credential or payment harvesting
Domain is not in Cisco Umbrella top 1M, but self-branding (subdomain matches page brand) means this is not typosquatting
No malware, phishing or C2 indicators from YARA, kit roster, IDS or Safe Browsing
No cross-origin script contact or credential exfiltration observed
Domain age information unavailable

Details

Page Title

Rook Browser

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'rook-browser-dpp5foq6zxbd.edgeone.dev' is registered and includes subdomain 'rook-browser-dpp5foq6zxbd'. Its registrable label 'edgeone' stretches across 7 characters holding 4 vowels versus 3 consonants. Segmentation suggests 2 words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rook-browser-dpp5foq6zxbd.edgeone.dev/

Page Load Overview

1.08s
Total Load Time
852 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:639 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%
documentation technical
53%
government public service
43%
e-commerce shopping
41%
cryptocurrency blockchain
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
343.174.246.29Singapore
0104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
043.174.247.29Singapore
34--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12263E76B23F31076596371B82BDB97463635A0039406CA683EDC43A48FC6EE49DA37DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:iupIpDUvNONTefOotYTSSdonMozMWRZ6eTefOotYc44K6wPf00gqtWRkKrSLZB8t:gpDUFOZSSdonMo1Z644PwvgqtupWLZgV

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71155:iwzQGqHQkexAUmBAUtBA4THBbLCxDCzjGeseKFEOPAoNCUYCAC2CJcAaFEQ+lIgqUJBBkDyIJBcZ4OsKgCHIoY3AAqSgw8Bj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00001818180000
Perceptual Hash:ccfa738a8ca8a3aa
Difference Hash:0380081030300400
Wavelet Hash:fff238383c3c3030
Color Hash:#2d8649

Other Hashes

Crop Resistant:0380081030300400

Scan History

Scan history not available

Unable to load historical scan data