Security Scan Report: wehbmalmtz.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 3 domains to perform 8 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://wehbmalmtz.vercel.app/?89814f65-4c33-43bf-9da6-d75601d37375

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Branded 'Bellis MyAccount' login collecting username/password on a random Vercel subdomain with a UUID link and IP-fingerprinting script — shape of a credential-phishing portal, not the brand's real site.

Risk Factors (5)
Credential capture form (username + password) on a shared hosting-platform subdomain with unknown creation date
Brand/hostname mismatch: 'Bellis MyAccount' login on a random vercel.app slug that is not the brand's domain
External IP-lookup call (api.ipify.org) from page scripts, typical of phishing-kit fingerprinting
UUID-style query parameter appended to the URL, suggesting a per-recipient phishing link
Unranked domain with minimal independent legitimacy signals (legitimacy score 10/100)
Domain age information unavailable

Details

Page Title

Welcome Back!

Scan Type

public

Domain Name Analysis

The domain 'wehbmalmtz.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'wehbmalmtz'. Count 6 characters in 'vercel' containing two vowels alongside four consonants. Segmentation suggests 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wehbmalmtz.vercel.app/?89814f65-4c33-43bf-9da6-d75601d37375

Page Load Overview

0.51s
Total Load Time
131 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:189 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business33% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
33%
technology software
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
464.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
85--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C5173B0615109BB51234DE1F2E1B76924DDE30FC267C880F3F882742BE9D908C97A29

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TIT9f37+tKS007wLKs3JTmV9OcAnONzNIcR3mX3WZ6K+kO:TCfLRSwWs3zk/IcRWXGZF+kO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2509:CAAAAAAAIAgIACCCAigoAAAgWIAAQASIIJAQIAAUQgIAAGQCgAEIRAAAIAAAEAAIAAoIMIIIgBEAAABEAEAQEABABABQUEAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7efe7e7e7ff
Perceptual Hash:b333cc64cccc6633
Difference Hash:00080c080c0c0800
Wavelet Hash:3f2707072424243c
Color Hash:#e0856c

Other Hashes

Crop Resistant:00080c080c0c0800

Scan History

Scan history not available

Unable to load historical scan data