Security Scan Report: www.form-survey-i51v.vercel.app

Redirected to:
https://form-survey-i51v.vercel.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 8 domains to perform 49 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.form-survey-i51v.vercel.app/

Effective URL:
https://form-survey-i51v.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Cloned IRS page with the agency's favicon and branding on a free vercel.app subdomain, not irs.gov. Classic government-brand impersonation; no credential form captured, but do not enter any data.

Risk Factors (5)
Brand impersonation of IRS on a non-official domain (vercel.app)
Favicon of IRS served from a host with no relationship to the agency
Full-site cloning of IRS content and metadata on a free hosting subdomain
Unknown-age, unranked shared-hosting tenant presenting as a government site
Unexpected financial-promotion text injected into the cloned government page
Domain age information unavailable

Details

Page Title

Internal Revenue Service | An official website of the United States government

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.form-survey-i51v.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'www.form-survey-i51v'. The core label 'vercel' covers 6 characters holding two vowels versus 4 consonants. Splitting it apart reveals 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

= An official website of the United States government Here's how you know v YRS el | English v | TaxPros | signin w File Pay Refunds Credits & Deductions Forms Report Fraud Review of Digital ag Tru...

Page Load Overview

16.25s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:45,517 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service59% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
59%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
323.32.242.149Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
33.174.46.54Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.20.20.192Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
33.30.52.161Aws · CLOUDBoardman, Oregon, United States
AS8987Amazon
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
364.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4913--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C3D46281A2F4063B364346E5DC7AF6BCB585F28BCF0910467DFF46AACF93A209556309

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:f8xITOlX8YnETjomGtbprDUf3yXVe6xvFF:0V

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:653949:AK0sCaWUiMQGybQEhUIglExGGqgwAZILRQTIEMQkBBhBxAhEwgCBgKM0AIAISAYAjwCiuKyIaKBKSRICKDEZDRJ5AVqAQCmZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000fff7e7ffffff
Perceptual Hash:b61859636648b9eb
Difference Hash:cd1c322e0e4e912e
Wavelet Hash:00008b83c3a7ffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data