Security Report: ctmscat.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1639ba4a-f348-4998-b712-6837ba540c3a Domain and IP registration (RDAP)/api/v1/rdap/1639ba4a-f348-4998-b712-6837ba540c3a Certificate Transparency/api/v1/ct/ctmscat.vercel.app How often this domain was scanned/api/v1/domain/stats/ctmscat.vercel.app Scan history for this domain/api/v1/domain/history/ctmscat.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is ctmscat.vercel.app and was registered 18 years ago.

Submitted URL: http://ctmscat.vercel.app/

Effective URL:

https://ctmscat.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Phishing page impersonating the Generalitat de Catalunya on a vercel.app subdomain; its sign-in form exfiltrates email and password to submit-form.com. Do not enter credentials.

Risk Factors (4)

Brand impersonation of a government entity (Generalitat de Catalunya) on a mismatched host

Subdomain on free hosting platform (.vercel.app) with unknown creation date

HIGH-severity IDS alert for form exfiltration to submit-form.com; two MEDIUM alerts for actor-abused cloud hosting (vercel.app)

Domain age information unavailable

Details

Page Title

Generalitat de Catalunya - Sign in

Scan Type

public

Domain Name Analysis

The domain 'ctmscat.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'ctmscat'. The second-level label 'vercel' is 6 characters long containing 2 vowels alongside 4 consonants. Breaking it apart gives two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.24s

Total Load Time

9 KB

Total Size

Language Analysis

Primary Language

🇪🇸CA

Code: ca

Confidence:34%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:289 chars

Detector Agreement:75%

Language mismatch: Declared as en but detected as ca

Website Classification

Primary Category

government public service64% confidence

Type: webapp

Method: ml+structural

All Detected Categories

government public service

64%

corporate business

61%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.14.139Google · CDN	United States	AS15169Google LLC
1	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.13.100Google · CDN	United States	AS15169Google LLC
4	4	-	-