Security Scan Report: www.tqi21.vercel.app

Redirected to:
https://8ns8mt0ynl.tosyretwohwouttrion.com/yjcsyfeg-hu7eearram-pbkwdwx...
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 43 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.tqi21.vercel.app/

Effective URL:
https://8ns8mt0ynl.tosyretwohwouttrion.com/yjcsyfeg-hu7eearram-pbkwdwx...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake Adobe Acrobat Reader 'secured attachment' viewer on a free vercel.app subdomain that redirects to a random unrelated domain; Safe Browsing and phishing feeds both flag it. Do not download or open anything.

Risk Factors (6)
Impersonation of Adobe Acrobat Reader branding and document-viewer UI on a domain not owned by Adobe
Safe Browsing social-engineering detection
Corroborated phishing threat-intel match on the entry domain
Redirect to an unrelated random-string domain (tosyretwohwouttrion.com) unrelated to the entry host
Anti-analysis JavaScript: DevTools and right-click blocking (2 techniques)
Shared free-hosting namespace (vercel.app) flagged by IDS as a commonly actor-abused cloud hosting service
Domain age information unavailable

Details

Page Title

Files

Scan Type

public

Domain Name Analysis

The domain 'www.tqi21.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'www.tqi21'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. It segments into two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.tqi21.vercel.app/

Page Load Overview

6.80s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:276 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software63% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
63%
documentation technical
61%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
485.11.167.134Amsterdam, North Holland, Netherlands
AS197170TechTies Inc.
4104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
464.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
439--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F932CA38E405EA7FD9239D9564367F3E54CEC29EC6A1891CB3FCC61403928B98DA6CC4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:alVvZuzDn9xaxIQxjyOXOYQOxlLU6+roSMLtRC7PxtJg5FuhcgnqzbJmuk:4TuP/qIwJeYrxlLUH4LS7PxtJ0oqXk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11328:CMCfBUgkJBJQBOhXgjQtASAnIsmAENiwACJw0EAAsZAAtCkEJjWxFAhAkgoJNFJMSiNkpWAoWRCBPoOQWVAkIIiQzQFpUkIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e3ff8181bfffff
Perceptual Hash:ef64405b4b591b72
Difference Hash:70060e232b710421
Wavelet Hash:00c3c7818189ffff
Color Hash:#d279cc

Scan History

Scan history not available

Unable to load historical scan data