Security Scan Report: bit-internet-zeeeeryyo8ihhky789.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://bit-internet-zeeeeryyo8ihhky789.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Vercel subdomain hosting a credential login form with an embedded Telegram exfiltration token, IP-lookup call and anti-analysis JS; threat intel flags the domain itself as phishing. Do not enter credentials.

Risk Factors (5)
Phishing threat-intel match on the primary scanned domain
Login form collecting email/username + password on a throwaway, randomly-named vercel.app subdomain of unknown creation date
Telegram bot token embedded in page script enabling direct credential exfiltration
Right-click blocked and anti-analysis/obfuscator signals in page JavaScript
Cross-origin POST to an IP-lookup service (api64.ipify.org) and referencing an email-authentication endpoint consistent with a phishing kit
Domain age information unavailable

Details

Page Title

Secure Authentication

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'bit-internet-zeeeeryyo8ihhky789.vercel.app' is registered, featuring subdomain 'bit-internet-zeeeeryyo8ihhky789'. Its registrable label 'vercel' stretches across 6 characters split between 2 vowels and 4 consonants. Segmentation suggests 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Log in Email or username | Email or username Password Forgot log-in detaits? Cancel

Page Load Overview

0.59s
Total Load Time
132 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:90 chars
Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
364.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
145.60.65.23Incapsula · WAFUnited States
AS19551Incapsula Inc
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
64--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D422742216602745138DC7EB7923FFC6D787480678490696F29C3C517A9C722FAD66F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:LWX7Sd9zFTMdnSoSdmZcmnatg8HpVm4wLVn+wz53nwLVn+wa8wLVn+wa1GwLVn+X:iX7awumZcmnae8HpVm4wLVn+wz53nwLQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10467:mjIIYSRTGMACihFAAAwIhADWBwEEgJCM2ZIIJgylVRCNoFQtXFCDCDUCBIJhkAyBAtXodnEXAxxqGFAMNBKAFLQrgCCoMAAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff7f1f1fffff
Perceptual Hash:9fe0e01fe0e01f1e
Difference Hash:000060c068680020
Wavelet Hash:f0101010101010f0
Color Hash:N/A

Other Hashes

Crop Resistant:000060c068680020

Scan History

Scan history not available

Unable to load historical scan data