Security Scan Report: ejtgs7hmgzc00c87y3r.vercel.app

Redirected to:
https://jejy40p-h07p.vercel.app/10004567348379/fbs5wsertnbstfdg4scxqIB...
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 4 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ejtgs7hmgzc00c87y3r.vercel.app/nsvw35re4hbarefsdbvzxcv.html

Effective URL:
https://jejy40p-h07p.vercel.app/10004567348379/fbs5wsertnbstfdg4scxqIB...
Redirected

AI Security Verdict

High Risk

Confidence: 74%

8
Risk Score

Disposable vercel.app phishing-shaped page: hidden password field and email fields on a random subdomain, cross-origin form posting to a sibling subdomain, ipapi.co geolocation, and cl...

Risk Factors (6)
Hidden/offscreen password field with zero surrounding legitimate page content (page extracts to nothing but the title 'Home')
Randomized subdomain (ejtgs7hmgzc00c87y3r) and randomized HTML filename redirecting to a second randomized subdomain and path
Cross-origin form action to a sibling vercel.app subdomain rather than the site's own registered domain
External IP-lookup call (ipapi.co) used to profile visitors — anti-analysis/cloaking behavior
Different content served to the scanner vs. a residential client (bot-protection bypass / cloaking)
Unranked in Cisco Umbrella; subdomain creation date unknown; platform abuse reputation for vercel.app
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

The domain name 'ejtgs7hmgzc00c87y3r.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'ejtgs7hmgzc00c87y3r'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus four consonants. Tokenizing the label suggests 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ejtgs7hmgzc00c87y3r.vercel.app/nsvw35re4hbarefsdbvzxcv.html

Page Load Overview

1.11s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:4,015 chars
Detector Agreement:75%
Language mismatch: Declared as vi but detected as en

Website Classification

Primary Category

social media network53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
53%
technology software
30%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.3United States
AS16509Amazon.com, Inc.
164.29.17.131United States
AS16509Amazon.com, Inc.
1216.198.79.131United States
AS16509Amazon.com, Inc.
43--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T101B13B73B9C01C34EBC5899488E8370CFA1D895A7D411EFBF75A10296B476E2E17C399

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TBxslWLksDlS405gaSnDJphlQTOIaGQvAPveQL2uadk67v0dSIrCdPZ5ACJFC9aB:VxslWLksDlS405gaSnDJphlQTOIaGQ42

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5518:EQEByAEQQXAQWkABgAYQAAAAQAASQAgABguoIqFKCQMCakBkMCWYEQAAIRiqIEgAgCiRA1sDASICApIAIIBoILQA1gAMBAEE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffcfcfffffff
Perceptual Hash:b1c6ce3131cece31
Difference Hash:0000001818000000
Wavelet Hash:f0f0f0c0c0f0f0f0
Color Hash:#3a5d78

Other Hashes

Crop Resistant:0000001818000000

Scan History

Scan history not available

Unable to load historical scan data