ScanMalware.com

Security Scan Report: it-security-rho.vercel.app

Redirected to:
https://it-security-rho.vercel.app/
Submitted: Sep 24, 2026, 1:45:37 PMCompleted: Sep 24, 2026, 1:46:47 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/14530959-376a-4a73-81f1-b0e10331c45aDomain and IP registration (RDAP)/api/v1/rdap/14530959-376a-4a73-81f1-b0e10331c45aCertificate Transparency/api/v1/ct/it-security-rho.vercel.appHow often this domain was scanned/api/v1/domain/stats/it-security-rho.vercel.appScan history for this domain/api/v1/domain/history/it-security-rho.vercel.app?limit=15

This website contacted 8 IPs in 1 country across 5 domains to perform 11 HTTP transactions. The main domain is it-security-rho.vercel.app and was registered 12 years ago.

Submitted URL: http://it-security-rho.vercel.app/

Effective URL:

https://it-security-rho.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing page on a Vercel subdomain: its login form captures email/password and JavaScript exfiltrates them to Telegram. Do not enter credentials.

Risk Factors (5)
Credential exfiltration to external server via JavaScript (Telegram bot exfil)
Credential/password capture form on an unranked, hostable subdomain
Hidden 'botcheck' anti-bot field typical of scam kits
Domain unranked in Cisco Umbrella (no legitimate reputation)
Cross-origin IP-lookup call (api.ipify.org) feeding the exfil function
Domain age information unavailable

Details

Page Title

계정 인증

Scan Type

public

Domain Name Analysis

Domain 'it-security-rho.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'it-security-rho'. The core label 'vercel' covers 6 characters containing 2 vowels alongside four consonants. Breaking it apart gives two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://it-security-rho.vercel.app/

Page Load Overview

1.27s
Total Load Time
261 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:60%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:71 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

phishing scam61% confidence
Type: static
Method: ml+structural

All Detected Categories

phishing scam
61%
finance banking
37%
adult content
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1209.94.90.1United States
AS40680Protocol Labs
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10BF023DB4CF6F4D54141A6DC7CB19618547F0394E0D9CB58A5E0007A78516BC4DC59A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hRYXAqJmWG52bGIu28natRS6HK/h09EIuCPSqfN8eO33LJp2JG:hRizKydROmUgCNLJ8JG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:636:AAAAAACAAEAAAAIAAAAAACAAAAAAAAABAAAAAAABAAAFAAAQAAAAAAAAAAAAAAAAAAAABAAAAQAAAAAAAACAAAAAAABAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efe7e7e7e73f1505
Perceptual Hash:b7f01fc88cc83366
Difference Hash:080c0c040c515575
Wavelet Hash:e6e6e6e6e61c8405
Color Hash:#784f3a

Other Hashes

Crop Resistant:080c0c040c515575

Scan History

Scan history not available

Unable to load historical scan data