other

English

The domain 'webcya-discord-webhook-sender-k9q8zv4t1a.edgeone.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'webcya-discord-webhook-sender-k9q8zv4t1a'. Its registrable label 'edgeone' stretches across 7 characters containing 4 vowels alongside 3 consonants. Segmentation suggests 2 words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

html/3e/a5/3ea5a005-6e18-41cd-8fa8-fde67c7ee6aa.html.gz

7b67149ef12c480c933a5cd8379d6c717efd2e07478ff4a29e90b1a5898e02c4

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


    async function sendWebhook() {
      const url = document.getElementById('webhook').value.trim();
      const message = document.getElementById('message').value;
      const fileInput = document.getElementById('file');
      const status = document.getElementById('status');

      if (!url) {
        status.textContent = "Please enter a webhook URL.";
        return;
      }

      try {
        if (fileInput.files.length > 0) {
          const formData = new FormData();
          formData.append("content", message);
          formData.append("file", fileInput.files[0]);

          await fetch(url, { method: "POST", body: formData });
        } else {
          await fetch(url, {
            method: "POST",
            headers: { "Content-Type": "application/json" },
            body: JSON.stringify({ content: message })
          });
        }
        status.textContent = "Message sent!";
      } catch (err) {
        status.textContent = "Error: " + err.message;
      }
    }

    document.getElementById('send').addEventListener('click', sendWebhook);
  

WebCya, Discord Webhook sender

✅ Low Risk - https://webcya-discord-webhook-sender-k9q8zv4t1a.edgeone.app/

Requests	IP Address	Location	AS Autonomous System
2	43.152.26.58	Singapore	AS139341ACE
1	142.250.184.202	United States	AS15169GOOGLE
1	2a00:1450:4001:829::200a	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
3	3	-	-

Security Scan Report: webcya-discord-webhook-sender-k9q8zv4t1a.edgeone.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History