Security Scan Report: ymbb7ehcnzzxpfanknd.vercel.app

Redirected to:
https://ufnx55uuqh-h05h.vercel.app/10025078036/hsg5hwabt3bgfdsht5dfA.h...
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 5 domains to perform 22 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ymbb7ehcnzzxpfanknd.vercel.app/ghnjs45thw3er4sahgbaser.html

Effective URL:
https://ufnx55uuqh-h05h.vercel.app/10025078036/hsg5hwabt3bgfdsht5dfA.h...
Redirected

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Randomly-named vercel.app subdomain chain with a hidden password field posting credentials cross-origin to another rotating subdomain, IP-lookup geo-fencing and a phishing IDS alert — strong credential-harvesting pattern.

Risk Factors (7)
Hidden password field in HTML not visible to the user
Cross-origin credential form submission to another unrelated random vercel.app subdomain
Multiple randomly-generated gibberish subdomains on a free hosting platform with unknown creation date
Multiple redirect hops between rotating subdomains
External IP/geolocation lookup via ipapi.co
Network IDS phishing alert (informational, high false-positive rate)
Scanner-vs-client content mismatch (scanner received a 'Meta Advertising Standards' page while the real capture shows 'Home')
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

The domain name 'ymbb7ehcnzzxpfanknd.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'ymbb7ehcnzzxpfanknd'. Its registrable label 'vercel' stretches across 6 characters holding 2 vowels versus 4 consonants. Splitting it apart reveals two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ymbb7ehcnzzxpfanknd.vercel.app/ghnjs45thw3er4sahgbaser.html

Page Load Overview

0.40s
Total Load Time
635 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:4,012 chars
Detector Agreement:100%
Language mismatch: Declared as vi but detected as en

Website Classification

Primary Category

social media network57% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
57%
technology software
37%
documentation technical
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.69.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.31.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.180.104Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
228--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T164C168635AD04C1187F508D46AECBF1BFA1AC4DA29791D337306127F6B47AFBA129708

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBI+aislWFmqr/1p6FVWyeejWRiVigCrcUAnW2dhUenDIwp01lw5StWsu2FpPyHi:TBxolWFzRkdtVjp9y1ABlc42

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5610:EEYLMRoACEsIEkBFwBJIAooAUgAIAJBAEIAACQCICGAAgJGYAgRgAKBQBk4LgBAYAINQGEESgAGMl8I0gBDGBCyAjoAkAASA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffff7ffffffff
Perceptual Hash:a222888822228888
Difference Hash:0000000808000000
Wavelet Hash:0f0f0f07243c3030
Color Hash:#6a2d86

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data