Security Scan: Blue Tick Verified

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1af72c54-7ca9-4ac3-b365-2d41f75d02ef Domain and IP registration (RDAP)/api/v1/rdap/1af72c54-7ca9-4ac3-b365-2d41f75d02efHow often this domain was scanned/api/v1/domain/stats/qorlixva-mek572918463.vercel.app Scan history for this domain/api/v1/domain/history/qorlixva-mek572918463.vercel.app?limit=15

This website contacted 26 IPs in 1 country across 12 domains to perform 35 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://qorlixva-mek572918463.vercel.app/

Effective URL:

https://qorlixva-mek572918463.vercel.app/index1.html

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake 'Meta Verified' badge page on an unrelated vercel.app subdomain harvesting Facebook email/password logins, with a Telegram bot token in its script for exfiltrating stolen credentials.

Risk Factors (6)

Brand impersonation of Meta/Facebook on a non-Meta domain with a credential form (defining phishing shape)

Credential collection: email/phone + password login fields presented as 'Meta Verified' activation

Telegram bot token embedded in page script enabling exfiltration of submitted data

Random, brand-unrelated subdomain on a free hosting platform with unknown creation date

Unranked domain (not in Cisco Umbrella top 1M) while claiming a major social-media brand

External IP-geolocation lookups and IDS alerts for actor-abused cloud hosting

Domain age information unavailable

Details

Page Title

Blue Tick Verified

Scan Type

public

Favicon Hash

MMH3: 117608275

MD5: 6701a4ba0b931af579be35b93631da04

Domain Name Analysis

The domain 'qorlixva-mek572918463.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'qorlixva-mek572918463'. Count 6 characters in 'vercel' containing two vowels alongside 4 consonants. It segments into two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.53s

Total Load Time

1.9 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:3,068 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network93% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

93%

adult content

34%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.13.113Google · CDN	United States	AS15169Google LLC
1	142.251.157.120Google · CDN	United States	AS15169Google LLC
1	142.250.154.95Google · CDN	United States	AS15169Google LLC
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	104.26.0.100Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.20.94Google · CDN	United States	AS15169Google LLC
35	26	-	-