Security Scan: https://kjhkjh-o4ul.vercel.app/hgcfgvgh.html

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6801bb7d-ec8d-46ac-bd0c-74af19711f51 Domain and IP registration (RDAP)/api/v1/rdap/6801bb7d-ec8d-46ac-bd0c-74af19711f51How often this domain was scanned/api/v1/domain/stats/kjhkjh-o4ul.vercel.app Scan history for this domain/api/v1/domain/history/kjhkjh-o4ul.vercel.app?limit=15

This website contacted 18 IPs in 1 country across 11 domains to perform 15 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://kjhkjh-o4ul.vercel.app/hgcfgvgh.html

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Anonymous Vercel subdomain serving a credential-harvesting login form, flagged by Safe Browsing for social engineering, with a Telegram bot token and ipinfo.io lookup built in to exfiltrate stolen data.

Risk Factors (6)

Google Safe Browsing Social Engineering (phishing) threat

Credential-harvesting login form on an anonymous shared-hosting subdomain with unknown creation date

Telegram bot token in inline script enabling credential exfiltration

Obfuscated script contacting ipinfo.io for victim IP/geo logging

Hidden non-standard form fields and generic phishing-kit validation messages

Network IDS alerts for actor-abused cloud hosting (vercel.app)

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'kjhkjh-o4ul.vercel.app' is registered with subdomain 'kjhkjh-o4ul'. Its registrable label 'vercel' stretches across 6 characters with two vowels and four consonants. Breaking it apart gives 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.66s

Total Load Time

400 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:52%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:???

Text Length:221 chars

Detector Agreement:100%

Language mismatch: Declared as ??? but detected as en

Website Classification

Primary Category

finance banking30% confidence

Type: webapp

Method: ml+structural

All Detected Categories

finance banking

30%

adult content

30%

news media journalism

30%

government public service

29%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	142.251.14.95Google · CDN	United States	AS15169Google LLC
0	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	142.251.13.95Google · CDN	United States	AS15169Google LLC
0	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.154.119Google · CDN	United States	AS15169Google LLC
15	18	-	-