Security Scan: 계정 인증

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0a48628-b2a3-47e2-ab27-abf95210ee29 Domain and IP registration (RDAP)/api/v1/rdap/b0a48628-b2a3-47e2-ab27-abf95210ee29How often this domain was scanned/api/v1/domain/stats/co-kr.vercel.app Scan history for this domain/api/v1/domain/history/co-kr.vercel.app?limit=15

This website contacted 9 IPs in 1 country across 5 domains to perform 10 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://co-kr.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed phishing kit on a vercel.app subdomain: a fake Korean login form whose script ships every entered email and password, plus the victim's IP, to a Telegram bot.

Risk Factors (6)

Credential exfiltration to external service detected in JavaScript (critical)

Telegram bot exfiltration channel embedded in page script

Password-harvesting form on a shared hosting platform subdomain with unknown creation date

External IP lookup used to profile victims alongside captured credentials

Network IDS alerts for abused cloud hosting service domain and external IP lookup

Generic unbranded Korean 'account verification' page with no legitimate service identity or supporting content

Domain age information unavailable

Details

Page Title

계정 인증

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'co-kr.vercel.app' is registered and includes subdomain 'co-kr'. Count 6 characters in 'vercel' with two vowels and four consonants. It segments into two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

AAO] BIAN2 ojo HS | B ojo wseise eyo Ous acta Forgot password?

Page Load Overview

2.21s

Total Load Time

261 KB

Total Size

Language Analysis

Primary Language

🇰🇷Korean

Code: ko

Confidence:60%

Script:Hangul

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:71 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

phishing scam61% confidence

Type: static

Method: ml+structural

All Detected Categories

phishing scam

61%

finance banking

37%

adult content

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	209.94.90.1	United States	AS40680Protocol Labs
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
10	9	-	-