government public service

technology software

phishing scam

education learning

Portuguese

The domain 'tiny-brown-7wuxgecydl-1kd58ng2vk.edgeone.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'tiny-brown-7wuxgecydl-1kd58ng2vk'. The core label 'edgeone' covers 7 characters holding 4 vowels versus 3 consonants. Segmentation suggests 2 words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

html/63/71/63718c27-7d1e-4c5f-b20c-39cd3fad3fcc.html.gz

db49d009c841f5ca34a888c96511ae936fd9f5533e90d8b2c4d57596f4e5641a

5b5799e6f8c680663207ac5b42ee14eed2a406fa7af48f50c154f0c0b1566946

73b512869d64d0f2828e436b24b23b7d84f24b7028bba6c49cb4d1c988103da4

c9506197caf809a075b6dee1da0d36fb19da7158ffe8a88e7b0c96c5d8623c99

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

a623f6bfb34d3ccddccf50860e5ee550af177edc75dc8f907a4830ffdc48eb1b

5850d94637ee2cd690fbeafdea0bfeb8a782d5a4fc35ecc3d34aec2e1e8254f4

74ac1f58698583b0f39b64419d0d64c803e232cdf3c41020db7c685b1cdf1769

b47892b39a47a5c8a85b7697cdeb690cccf1a97487b31adbf9d8670985bcf1f0

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Prudence Malinki

MarkMonitor Inc.

edgeone.app

pdfjsLib.GlobalWorkerOptions.workerSrc='https://cdnjs.cloudflare.com/ajax/libs/pdf.js/3.11.174/pdf.worker.min.js';


// ══ SUPABASE PROXY v2 — Redirects JSONBin API → Supabase json_store ══
// Auto-migrates data from JSONBin on first empty read
(function(){
  var _SB_URL = 'https://auoxzukcdzdfufvdgxzd.supabase.co';
  var _SB_KEY = 'sb_publishable_B49wGkHtB1swSefkbLtBQw_j89Q8kw0';
  var _realFetch = window.fetch.bind(window);
  var _migrating = {}; // Track in-progress migrations to avoid duplicates
  var _JB_MASTER = '$2a$10$duxscTUunfCEAHZ5I1l13.lgILAYiVWWD8fCCn/EYj9Kxf2GX2Qp2';

  function _sbHeaders(extra) {
    var h = { 'apikey': _SB_KEY, 'Authorization': 'Bearer ' + _SB_KEY };
    if (extra) Object.keys(extra).forEach(function(k){ h[k] = extra[k]; });
    return h;
  }

  // One-time migration: fetch from JSONBin → write to Supabase
  function _migrateFromJsonBin(binId) {
    if (_migrating[binId]) return _migrating[binId]; // Return existing promise
    _migrating[binId] = _realFetch('https://api.jsonbin.io/v3/b/' + binId + '/latest', {
      headers: { 'X-Master-Key': _JB_MASTER }
    }).then(function(r) {
      if (!r.ok) { console.warn('[SB Proxy] JSONBin read failed for ' + binId + ' (HTTP ' + r.status + ')'); return null; }
      return r.json().then(function(j) {
        var data = (j && j.record) ? j.record : null;
        if (data && Object.keys(data).length > 0) {
          console.log('[SB Proxy] Migrating bin ' + binId + ' → Supabase (' + Object.keys(data).length + ' keys)');
          return _realFetch(_SB_URL + '/rest/v1/json_store', {
            method: 'POST',
            headers: _sbHeaders({ 'Content-Type': 'application/json', 'Prefer': 'resolution=merge-duplicates' }),
            body: JSON.stringify({ id: binId, data: data, updated_at: new Date().toISOString() })
          }).then(function() { return data; }).catch(function(e) {
            console.warn('[SB Proxy] Supabase write failed during migration:', e.message);
            return data; // Still return data even if write fails
          });
        }
        return null;
      });
    }).catch(function(e) {
      console.warn('[SB Proxy] Migration failed for ' + binId + ':', e.message);
      return null;
    });
    return _migrating[binId];
  }

  function _sbRead(binId) {
    return _realFetch(_SB_URL + '/rest/v1/json_store?id=eq.' + binId + '&select=data', {
      headers: _sbHeaders()
    }).then(function(r) {
      if (!r.ok) return new Response(JSON.stringify({ record: {} }), { status: r.status, headers: {'Content-Type':'application/json'} });
      return r.json().then(function(rows) {
        var data = (rows.length && rows[0].data) ? rows[0].data : null;
        if (data && Object.keys(data).length > 0) {
          // Data exists in Supabase — return it
          _migrating[binId] = Promise.resolve(data); // Mark as migrated
          return new Response(JSON.stringify({ record: data, metadata: { id: binId } }), {
            status: 200, headers: {'Content-Type':'application/json'}
          });
        }
        // Supabase is empty for this bin — try migrating from JSONBin
        return _migrateFromJsonBin(binId).then(function(migData) {
          var finalData = migData || {};
          return new Response(JSON.stringify({ record: finalData, metadata: { id: binId } }), {
            status: 200, headers: {'Content-Type':'application/json'}
          });
        });
      });
    });
  }

  function _sbWrite(binId, payload) {
    _migrating[binId] = Promise.resolve(payload); // Mark as written
    return _realFetch(_SB_URL + '/rest/v1/json_store', {
      method: 'POST',
      headers: _sbHeaders({ 'Content-Type': 'application/json', 'Prefer': 'resolution=merge-duplicates' }),
      body: JSON.stringify({ id: binId, data: payload, updated_at: new Date().toISOString() })
    }).then(function(r) {
      return new Response(JSON.stringify({ record: payload, metadata: { id: binId } }), {
        status: r.ok ? 200 : r.status, headers: {'Content-Type':'application/json'}
      });
    });
  }

  // ── fetch() interceptor ──────────────────────────────────────
  window.fetch = function(url, opts) {
    if (typeof url !== 'string' || url.indexOf('api.jsonbin.io') === -1) {
      return _realFetch(url, opts);
    }
    var method = (opts && opts.method) || 'GET';
    var binMatch = url.match(/\/v3\/b\/([a-f0-9]+)/);

    if (!binMatch) {
      // POST /v3/b — create new bin
      if (method === 'POST') {
        var body = {}; try { body = JSON.parse(opts.body); } catch(e) {}
        var newId = 'sb_' + Date.now() + '_' + Math.random().toString(36).substr(2,6);
        return _sbWrite(newId, body).then(function() {
          return new Response(JSON.stringify({ metadata: { id: newId }, record: body }), {
            status: 200, headers: {'Content-Type':'application/json'}
          });
        });
      }
      return _realFetch(url, opts);
    }

    var binId = binMatch[1];
    if (url.indexOf('/latest') !== -1 || method === 'GET') {
      return _sbRead(binId);
    } else if (method === 'PUT') {
      var payload = {}; try { payload = JSON.parse(opts.body); } catch(e) {}
      return _sbWrite(binId, payload);
    }
    return _realFetch(url, opts);
  };

  // ── XMLHttpRequest interceptor (for hub reset & similar) ─────
  var _origXhrOpen = XMLHttpRequest.prototype.open;
  var _origXhrSetHeader = XMLHttpRequest.prototype.setRequestHeader;
  var _origXhrSend = XMLHttpRequest.prototype.send;
  // Store original responseText getter for fallback
  var _rtDesc = Object.getOwnPropertyDescriptor(XMLHttpRequest.prototype, 'responseText');

  XMLHttpRequest.prototype.open = function(method, url) {
    if (typeof url === 'string' && url.indexOf('api.jsonbin.io') !== -1) {
      var binMatch = url.match(/\/v3\/b\/([a-f0-9]+)/);
      if (binMatch) {
        var binId = binMatch[1];
        var isLatest = url.indexOf('/latest') !== -1;
        if (isLatest || method === 'GET') {
          this._sbRedirect = { binId: binId, method: 'GET' };
          return _origXhrOpen.call(this, 'GET', _SB_URL + '/rest/v1/json_store?id=eq.' + binId + '&select=data');
        } else if (method === 'PUT') {
          this._sbRedirect = { binId: binId, method: 'PUT' };
          return _origXhrOpen.call(this, 'POST', _SB_URL + '/rest/v1/json_store');
        }
      }
    }
    return _origXhrOpen.apply(this, arguments);
  };

  XMLHttpRequest.prototype.setRequestHeader = function(name, value) {
    if (this._sbRedirect) {
      if (name === 'X-Master-Key' || name === 'X-Access-Key' || name === 'X-Bin-Name' || name === 'X-Bin-Private') {
        if (!this._sbHeadersSet) {
          this._sbHeadersSet = true;
          _origXhrSetHeader.call(this, 'apikey', _SB_KEY);
          _origXhrSetHeader.call(this, 'Authorization', 'Bearer ' + _SB_KEY);
          if (this._sbRedirect.method === 'PUT') {
            _origXhrSetHeader.call(this, 'Prefer', 'resolution=merge-duplicates');
          }
        }
        return;
      }
    }
    return _origXhrSetHeader.apply(this, arguments);
  };

  XMLHttpRequest.prototype.send = function(body) {
    var xhr = this;
    if (this._sbRedirect && this._sbRedirect.method === 'PUT' && body) {
      _migrating[this._sbRedirect.binId] = Promise.resolve(true);
      var payload = {}; try { payload = JSON.parse(body); } catch(e) { payload = body; }
      body = JSON.stringify({ id: this._sbRedirect.binId, data: payload, updated_at: new Date().toISOString() });
    }
    if (this._sbRedirect && this._sbRedirect.method === 'GET') {
      // Transform Supabase response → JSONBin format
      var origOnReady = this.onreadystatechange;
      this.onreadystatechange = function() {
        if (xhr.readyState === 4 && xhr.status >= 200 && xhr.status < 300) {
          try {
            var raw = _rtDesc ? _rtDesc.get.call(xhr) : xhr.responseText;
            var rows = JSON.parse(raw);
            var data = (rows.length && rows[0].data) ? rows[0].data : {};
            var transformed = JSON.stringify({ record: data });
            try {
              Object.defineProperty(xhr, 'responseText', { value: transformed, writable: true, configurable: true });
            } catch(e1) {
              // Fallback for environments where responseText can't be overridden
              xhr._transformedResponse = transformed;
            }
            try {
              Object.defineProperty(xhr, 'response', { value: transformed, writable: true, configurable: true });
            } catch(e2) {}
          } catch(e) { console.warn('[SB Proxy] XHR transform error:', e); }
        }
        if (origOnReady) origOnReady.apply(xhr, arguments);
      };
    }
    return _origXhrSend.call(this, body);
  };

  console.log('[Supabase Proxy v2] Active — JSONBin → Supabase with auto-migration');
})();




/* Safe element helpers to prevent null errors */
function _st(id,v){var e=document.getElementById(id);if(e)e.textContent=v;}
function _si(id,v){var e=document.getElementById(id);if(e)e.innerHTML=v;

Requests	IP Address	Location	AS Autonomous System
5	104.18.38.10	United States	AS13335Cloudflare, Inc.
3	43.152.26.58	Singapore	AS139341ACE
3	104.17.25.14	United States	AS13335Cloudflare, Inc.
11	3	-	-

Security Scan Report: tiny-brown-7wuxgecydl-1kd58ng2vk.edgeone.app

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History