When you land on a page called "PORTAL - Mail Authentication" that immediately asks for a password, you should expect to see a familiar brand or company logo. Legitimate email portals from providers like Gmail, Outlook, or corporate IT departments all prominently display who they are, offer privacy policies, and use up-to-date security settings. This site does none of that. The domain is a random subdomain on edgeone.dev, and there is no about page, no company name, and no terms of service. Even though contact information was found, the overall anonymity is a major concern for a page that wants your password. If you need to check mail settings, go directly to your email provider's known website. Ignoring these warning signs could mean handing over your credentials to an unknown third party. The site's acceptance of outdated TLS versions and lack of basic security headers only add to the risk. Is emzy-li-dpb7940xq7sj.edgeone.dev a scam? It certainly behaves like one: asking for sensitive data without earning any trust first.
No — emzy-li-dpb7940xq7sj.edgeone.dev doesn't look safe
In plain English
This site looks suspicious. It asks for your password to access mail settings but provides almost no information about who runs it. The domain is anonymous, there's no privacy policy, and it uses outdated security protocols. I'd be very cautious before entering any credentials here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site uses a valid SSL certificate and modern TLS, but it still accepts outdated, vulnerable TLS 1.0/1.1, which is a meaningful risk for a page that asks for your password. No browser protection headers are set, leaving the page open to clickjacking and other attacks.
There is no way to know who runs this site. The domain is a random subdomain on a CDN, no about page or company name exists, and ownership is hidden behind an uncheckable TLD. For a password portal, this anonymity is a major red flag.
The site hasn't been blacklisted and passes Google's safety checks, but it has no track record — no rankings, no Trustpilot, and its web archive history is inaccessible. Without any external validation, you're flying blind.
Contact information was found, but there is no about page, no social media presence, and no clear indication of who operates this service. A legitimate password portal would at least tell you what company it belongs to.
No privacy policy or terms of service are provided. For any site that asks for a password — especially one claiming to handle mail settings — the absence of a privacy policy is a serious compliance gap, not something a legitimate service would skip.
The site loads quickly and resolves to working IP addresses, but it lacks basic infrastructure polish: no email handling, no DNSSEC, no security headers, and it runs on a generic hosting network in Singapore. Nothing about this setup inspires confidence for a password prompt.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.