Security Report: jawatan-mrdiy.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8928805e-1088-4a35-8826-49af37d7417b Domain and IP registration (RDAP)/api/v1/rdap/8928805e-1088-4a35-8826-49af37d7417bHow often this domain was scanned/api/v1/domain/stats/jawatan-mrdiy.vercel.app Scan history for this domain/api/v1/domain/history/jawatan-mrdiy.vercel.app?limit=15

This website contacted 8 IPs in 3 countries across 7 domains to perform 17 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://jawatan-mrdiy.vercel.app/

Effective URL:

https://jawatan-mrdiy.vercel.app/jawatankosong1.gy-i1d.com/02/jobs/MR....

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake MR D.I.Y job portal on an unofficial vercel.app subdomain that collects applicants' personal data and their Telegram account password, with a Telegram bot token embedded to exfiltrate it. Do not enter any information.

Risk Factors (5)

Brand impersonation of MR D.I.Y on a non-official .vercel.app subdomain

Credential harvest: password field for the victim's Telegram account plus name/phone number

Telegram bot token embedded in page script enabling exfiltration to an attacker-controlled chat

Fake verification code step and fake 'registration success' social-proof text ('Faris Hakim Telah Berjaya Mendaftar 4 minit lalu')

Third-party resources flagged as njrat malware (b.top4top.io, d.top4top.io)

Domain age information unavailable

Details

Page Title

Jawatan Kosong MR D.I.Y - Mohon Sekarang

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'jawatan-mrdiy.vercel.app' is registered; it also runs on subdomain 'jawatan-mrdiy'. The registrable portion 'vercel' spans 6 characters holding two vowels versus four consonants. Tokenizing the label suggests two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

(Cx Mawatan Koso ng! MAKLUMAT PENGESAHAN KHIR ® Faris Hakim Telah Berjaya Mendaftar Amit fata ) Maklumat Pemohon If buttran peribadi untuk permohonan jawatan EE Nama Penuh (sepertiIc} [ eth: MU...

Page Load Overview

0.21s

Total Load Time

999 KB

Total Size

Language Analysis

Primary Language

🇮🇩Indonesian

Code: id

Confidence:49%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:ms

Text Length:886 chars

Detector Agreement:100%

Language mismatch: Declared as ms but detected as id

Website Classification

Primary Category

corporate business46% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

corporate business

46%

government public service

38%

adult content

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	135.181.63.70	Helsinki, Uusimaa, Finland	AS24940Hetzner Online GmbH
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
2	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	8	-	-