news media journalism

government public service

English

The domain 'other-aqua-2qb7qzos.edgeone.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'other-aqua-2qb7qzos'. Count 7 characters in 'edgeone' containing four vowels alongside three consonants. Tokenizing the label suggests two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

user_username

user_password

html/a3/6c/a36cfc32-7f5a-4ceb-b348-07e3830d602e.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

af555745524b5a2d7e9aa623f85964fad33cda13494e21646a2e597854a7b2d1

0857736e239057f483bae5ffee37f173d9be52066a31b54bc5a94f7a1d1063a8

width=device-width, initial-scale=1, shrink-to-fit=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Prudence Malinki

MarkMonitor Inc.

edgeone.app

Abuse

Google LLC

GOOGLE

Requests	IP Address	Location	AS Autonomous System
7	142.251.20.94Google · CDN	United States	AS15169Google LLC
1	142.251.154.119Google · CDN	United States	AS15169Google LLC
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.156.119Google · CDN	United States	AS15169Google LLC
1	146.75.121.55Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
1	43.152.26.58	Singapore	AS139341ACE
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	7	-	-

Security Scan Report: other-aqua-2qb7qzos.edgeone.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History