Security Scan Report: wzq04.vercel.app

Redirected to:
https://8ns8mt0ynl.tosyretwohwouttrion.com/yjcsyfeg-hu7eearram-pbkwdwx...
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 5 domains to perform 41 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://wzq04.vercel.app/

Effective URL:
https://8ns8mt0ynl.tosyretwohwouttrion.com/yjcsyfeg-hu7eearram-pbkwdwx...
Redirected

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Fake 'Adobe Acrobat Reader' secured-attachment page on an unrelated throwaway domain, hidden from scanners behind a bot challenge with DevTools blocking. No verified credential form, but a classic document-lure; do not download.

Risk Factors (6)
Impersonation of Adobe's brand on a non-Adobe, unranked domain
Deceptive random-subdomain hostname and cross-domain redirect from a free hosting subdomain
Fake 'Secured Remote Attachment' / 'DOWNLOAD ALL' lure consistent with known fake-document delivery pages
DevTools and right-click blocking (2 anti-analysis techniques)
Bot-protection challenge served to scanner but real content to a residential client
HIGH IDS alert: ET DROP Spamhaus DROP listed inbound traffic; MEDIUM alerts for actor-abused cloud hosting (vercel.app) and Supabase
Domain age information unavailable

Details

Page Title

Files

Scan Type

public

Domain Name Analysis

The domain 'wzq04.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'wzq04'. The registrable portion 'vercel' spans 6 characters with 2 vowels and 4 consonants. It segments into 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://wzq04.vercel.app/

Page Load Overview

2.82s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:244 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
56%
documentation technical
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
564.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
585.11.167.134Amsterdam, North Holland, Netherlands
AS197170TechTies Inc.
5104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
418--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18B32EB38E101E9BFC9279D85A0367F3F50CB929EC2A5C91CA3FCC61403928B94DA6CC5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:alVvZuLDn9xaxIQxjyOXOYQOxlLU6+roSMLtRCxC3qrg5FuPcgnqzbJmuY:4Tun/qIwJeYrxlLUH4LSxC3qr0CqXY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11822:UGYA4JWAQTACMpBofDD0wYT0hFAw8DAAQlwI0gwAnQhGFGGqhICDQ0NCCQnAiBJjiQwLFiAkJqCAANCiAYpgJGQA0cBMeIMJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e3ff8181bfffff
Perceptual Hash:ff60405f4b591b62
Difference Hash:50060e2b2b710421
Wavelet Hash:00c3c7818189ffff
Color Hash:#5140bf

Scan History

Scan history not available

Unable to load historical scan data