When you see an employee portal that asks for payment card details, the bar for trust is high. ts11112-dpyehfx2grfz.edgeone.dev is a subdomain on edgeone.dev, presenting itself as a Telegram Mini App for work stats and card management. The presence of a legal-entity disclosure and privacy policy is a good start, but what’s missing matters more. The site still accepts TLS 1.0 and 1.1, encryption protocols that were officially deprecated years ago due to known vulnerabilities. Combined with zero browser security headers, this setup would fail most security audits for financial data handling. If your employer directed you here, ask your IT team whether this domain is the correct one and whether they enforce proper security standards. Without that confirmation, treat any payment information you enter with extra caution.
Not sure — double-check ts11112-dpyehfx2grfz.edgeone.dev first
In plain English
This site is a Telegram Mini App meant for employees to view work stats and manage payment card details. While it has some legal pages and a valid SSL certificate, accepting outdated TLS versions and missing basic security headers is a real concern for a service that handles sensitive financial data. I'd use caution until you confirm with your employer that this is their official tool.
Where the score comes from
The site uses modern TLS 1.3 but still accepts outdated TLS 1.0 and 1.1, which is a real vulnerability for any site processing payment card data. It also lacks basic browser protections like clickjacking or content security policies, which you'd expect in a well-secured employee portal.
The domain is a subdomain on edgeone.dev, not a company's own branded site, which makes ownership less transparent. However, the site does provide a legal-entity disclosure page (Impressum), anchoring it to a real business.
No blacklists or Google Safe Browsing flags. Its absence from the top million sites and lack of Trustpilot are normal for an internal tool. The Wayback Machine was unavailable, but there's no evidence of past issues.
The site is a single-page app that loads via JavaScript, so standard contact and about information isn't visible publicly. The legal page fills some gaps, but employees might struggle to find who exactly runs this tool.
Privacy policy and terms of service are present, and the site has a legal-entity disclosure, which covers basic GDPR obligations. For an internal tool handling payment card data, you'd want clearer cookie consent and data processing notices, but the basics are covered.
DNS resolves cleanly and page load is fast, but there's no email setup, no DNSSEC, and no security headers. The hosting is in Singapore on a smaller ASN, which is acceptable but not typical for a corporate HR tool.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →