Security Scan Report: td09yxlq5awmbpq6nyg.vercel.app

Redirected to:
https://qrid00805-h26.vercel.app/10003462346989/qsMJa1dvgLlRjLqIBW.htm...
Submitted: Sep 28, 2026, 12:45:39 AMCompleted: Sep 28, 2026, 12:47:38 AMpubliccompleted

This website contacted 8 IPs in 1 country across 5 domains to perform 22 HTTP transactions. The main domain is qrid00805-h26.vercel.app and was registered 10 years ago.

Submitted URL: https://td09yxlq5awmbpq6nyg.vercel.app/agdfdsbnr4esdbrbb43rwbn.html

Effective URL:

https://qrid00805-h26.vercel.app/10003462346989/qsMJa1dvgLlRjLqIBW.htm...
Redirected

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Cloaked page on disposable vercel.app subdomains with a hidden password field, cross-tenant form submission, IP-lookup profiling and bot-protection divergence. No brand impersonation or threat-intel hit, but the credential-capture + cloaking pattern is high risk.

Risk Factors (5)
Credential (password) field on a shared hosting-platform subdomain with random-string naming and unknown creation date
Cloaking / selective content delivery: scanner and residential client received materially different pages
Cross-tenant form submission and multi-hop redirects across disposable vercel.app subdomains
External IP-geolocation lookup (ipapi.co) executed by page scripts
Domain not present in Cisco Umbrella top 1M; no verifiable brand or content explaining the credential form
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

The domain name 'td09yxlq5awmbpq6nyg.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'td09yxlq5awmbpq6nyg'. The registrable portion 'vercel' spans 6 characters with 2 vowels and 4 consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://td09yxlq5awmbpq6nyg.vercel.app/agdfdsbnr4esdbrbb43rwbn.html

Page Load Overview

7.84s
Total Load Time
550 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:4,015 chars
Detector Agreement:75%
Language mismatch: Declared as vi but detected as en

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
864.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.9.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.21.31.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
228--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17AD17CB3E0C40A2105D888E9E7D93A0CBA87D54A988B6D577383215CDFB7AD9F43951C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBI+a311111CslWsm5MTb0IcMTb0I7/1p6F8tKhu9Peet0Yg4pvubLsUoTbp+46:TBx0lWsLQcQekAf9PeHYg4Y3sUoTbc46

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6412:RoCBAIaDQRBiEwAA4IIAHIsBQEgFICyCoOFgIKARCJACgMDBAABABQoERRRTW5ErkY6YDFCEJoEICwEMJ4AA5uQAhMSFATgH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:e6cc993366cc9926
Difference Hash:0000000808000000
Wavelet Hash:0f0f1f07243c3c3c
Color Hash:#e0ac6c

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data