Security Scan Report: ecountt.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ecountt.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 84%

9
Risk Score

Typosquatted vercel subdomain impersonating Ecount WebMail with a credential login form, flagged as phishing by threat intel. Do not enter login details; report it.

Risk Factors (5)
Brand impersonation of Ecount (Korean ERP/webmail provider) on a non-official, typosquat-style subdomain
Credential-harvesting login form (password + email fields) presented under a third-party brand
Single-source phishing threat-intel match on the primary domain
Free hosting subdomain (.vercel.app) with unknown actual page creation date, masking the true age
IDS alerts flagging the hosting service as commonly abused for malicious activity
Domain age information unavailable

Details

Page Title

Ecount WebMail - Login

Scan Type

public

Domain Name Analysis

The domain name 'ecountt.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'ecountt'. The second-level label 'vercel' is 6 characters long containing 2 vowels alongside 4 consonants. Splitting it apart reveals two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ecountt.vercel.app/

Page Load Overview

1.89s
Total Load Time
383 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:888 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical62% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
62%
technology software
60%
finance banking
44%
government public service
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
118.66.102.98Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
143.200.46.3Aws · CLOUDIncheon, Incheon, South Korea
AS16509Amazon.com, Inc.
118.66.102.7Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
118.66.102.84Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
87--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10DA2C650A4F91573055381E939A2F6193DA2D117CB0ADE04BAEC4BEA6FC3F428D0779D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:NYD+7Nca26dSpzZIg5eZ9BV9Qq3y3bS3gOv+8qr1hW6ecIZ/96:NI1a26dS5ZIg52VR3HyrJZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21516:BGApI1kSKTggtmuAAkCgi60YUJ44q0eAMhUvMkcCQIB7KoDIJJMJImACCYgaABECGRSBrAh6hYjAUkayJNNgQWzVAAG+QhVT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe6fee7e7ffff
Perceptual Hash:f755882276dd5522
Difference Hash:00214c104c0c3000
Wavelet Hash:f0f0c0c0e0e0f3f3
Color Hash:#4077bf

Other Hashes

Crop Resistant:00214c104c0c3000

Scan History

Scan history not available

Unable to load historical scan data