Security Scan Report: www.xetyuiomnxcewat.vercel.app

Redirected to:
https://xetyuiomnxcewat.vercel.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 4 domains to perform 5 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.xetyuiomnxcewat.vercel.app/

Effective URL:
https://xetyuiomnxcewat.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Hiworks (하이웍스) login page on a random vercel.app subdomain, impersonating the Gabia service and harvesting user passwords. Credential phishing — do not enter any information.

Risk Factors (5)
Brand impersonation of 하이웍스 (Hiworks) / Gabia on a non-official domain
Credential login form (password + username) collecting user secrets on impersonating infrastructure
Random gibberish subdomain on shared hosting platform vercel.app with unknown creation date
Threat-intel phishing report against the primary domain
Cross-origin POST beacon to unrelated domain imkaninvestments.com
Domain age information unavailable

Details

Page Title

하이웍스 로그인

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.xetyuiomnxcewat.vercel.app' is registered and includes subdomain 'www.xetyuiomnxcewat'. The registrable portion 'vercel' spans 6 characters containing two vowels alongside four consonants. Segmentation suggests two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.xetyuiomnxcewat.vercel.app/

Page Load Overview

0.99s
Total Load Time
47 KB
Total Size

Language Analysis

Primary Language

🇰🇷Korean
Code: ko
Confidence:80%
Script:Hangul
Direction:ltr

Detection Details

HTML Lang Attribute:ko
Text Length:658 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking79% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
79%
technology software
77%
government public service
61%
healthcare medical
57%
documentation technical
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1104.18.6.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.7.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
55--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16033942E95F305552C53A0B96BEFB251B336D00FC91EEE58BECC6140CF8D6909DA6388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:edVVrvj9H1s7OgqXnryt54WrOXJBbbsc18ohVKCf7CvS:edV31SynEmWrOXJpag7sS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:54932:SQbTGEoAEOwgCAAkykAo5FIAwUQGCEiUwCnRJAxITIAEQQTBGRAOAyAOwJo6kDAGkUEGiisBZ4KKtTUIABDaQHQsCBYhUMil

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffe7e7ffffff
Perceptual Hash:b333cc8c6666cc99
Difference Hash:080c084d0c000008
Wavelet Hash:e4e4e4e4e0f0f8e0
Color Hash:#2d5886

Other Hashes

Crop Resistant:080c084d0c000008

Scan History

Scan history not available

Unable to load historical scan data