Security Scan Report: twh081.vercel.app

Redirected to:
https://q2gt3hm03ukp.zanzanpowerbi.com/xlscdsoq-fb9qbe8vcb-hc8hvgc9pe5...
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 40 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://twh081.vercel.app/

Effective URL:
https://q2gt3hm03ukp.zanzanpowerbi.com/xlscdsoq-fb9qbe8vcb-hc8hvgc9pe5...
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake Adobe 'secure attachment' file page on a random subdomain of an unrelated domain, reached by redirect from free hosting, with DevTools/right-click blocking and a DOWNLOAD ALL lure. Treat as brand impersonation/file-delivery scam.

Risk Factors (6)
Impersonation of a different entity's brand (Adobe) on a mismatched, non-Adobe domain
Cross-domain redirect from a free hosting subdomain to an unrelated random subdomain
Fake 'Secured Remote Attachment' / 'DOWNLOAD ALL' lure with no verifiable document content
Anti-analysis behaviour: DevTools and right-click blocked
IDS alerts for actor-abused cloud hosting service (vercel.app in DNS and TLS SNI)
Datacenter scanner shown a 'Loading...' challenge page while real content is served to residential clients
Domain age information unavailable

Details

Page Title

Files

Scan Type

public

Domain Name Analysis

The domain name 'twh081.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'twh081'. The registrable portion 'vercel' spans 6 characters split between 2 vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://twh081.vercel.app/

Page Load Overview

0.56s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:143 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software80% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
80%
documentation technical
51%
news media journalism
41%
download file sharing
38%
government public service
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
564.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
585.11.167.134Amsterdam, North Holland, Netherlands
AS197170TechTies Inc.
5104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
407--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D022E935D405EE6FC8238E9990797E3E54CED1AEC3A5891CA3ECCA1803924FA4DE1CC4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:alVvZuzAnC5a5IQ5jLHXHYQHxlLUG+roSIvYRCPg5FblcgnqzbJmuY:4Tu8owIK3XYKxlLUzkvLP0nqXY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10528:BGGIEoEAEnhxAAEEiCBGCCCwWgTAyNChAAgQ2AETkAoMAhkAAGCiygRuZoIA1DccUk7Cw1Qg9SrDsDQiARBxooACCBFhjBIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data