Security Scan: Home

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c14c9971-6a5d-4c68-a252-e05b82983d45 Domain and IP registration (RDAP)/api/v1/rdap/c14c9971-6a5d-4c68-a252-e05b82983d45How often this domain was scanned/api/v1/domain/stats/nwmswvg9siydksxtmte.vercel.app Scan history for this domain/api/v1/domain/history/nwmswvg9siydksxtmte.vercel.app?limit=15

This website contacted 9 IPs in 1 country across 5 domains to perform 21 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://nwmswvg9siydksxtmte.vercel.app/hfgdkjmd456thwsfedvf

Effective URL:

https://rkcw59skcp-h01p.vercel.app/10025078036/hsg5hwabt3bgfdsht5dfA.h...

Redirected

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Near-empty 'Loading' page on disposable Vercel subdomains that hides a password field, carries 7 email inputs across 3 forms, profiles visitors via IP-lookup APIs and served a Meta-branded page to our scanner — consistent with a cloaked credential-phishing kit.

Risk Factors (5)

Password field present in HTML but not visible to the user (hidden credential input)

Seven email/username inputs across three forms on a content-free 'Loading' page

Cloaked content served differently to datacenter vs residential clients, with a Meta-branded interstitial shown to one of them

Multi-hop redirects between disposable-looking Vercel subdomains with cross-subdomain form submissions

External IP-lookup APIs contacted by page scripts (cloaking/visitor-profiling pattern)

Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'nwmswvg9siydksxtmte.vercel.app' is registered and includes subdomain 'nwmswvg9siydksxtmte'. The second-level label 'vercel' is 6 characters long split between two vowels and 4 consonants. Breaking it apart gives two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.33s

Total Load Time

635 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:4,012 chars

Detector Agreement:100%

Language mismatch: Declared as vi but detected as en

Website Classification

Primary Category

social media network57% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

social media network

57%

technology software

37%

documentation technical

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.180.104Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.21.31.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	9	-	-