Security Report: refunds.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/22ac582f-a6b6-40a0-a0a5-81800ff11133 Domain and IP registration (RDAP)/api/v1/rdap/22ac582f-a6b6-40a0-a0a5-81800ff11133How often this domain was scanned/api/v1/domain/stats/refunds.vercel.app Scan history for this domain/api/v1/domain/history/refunds.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 19 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://refunds.vercel.app/

Effective URL:

https://refunds.vercel.app/PortailAS/appmanager/cnntnw-96_f8v3n-/assur...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Phishing page impersonating the French ameli/Assurance Maladie health portal on a vercel.app subdomain, harvesting name, DOB, email, phone and password while contacting an external unranked host.

Risk Factors (5)

Brand impersonation of a government health-insurance service (ameli / Assurance Maladie) on an unrelated vercel.app subdomain

Personal/medical data collection form (name, DOB, email, phone, password field) on a look-alike host

Primary domain reported as phishing in threat intelligence

Cross-origin fetch to drovn.pythonanywhere.com (unranked) from page scripts

Free instant-subdomain hosting with no verifiable ownership or reputation

Domain age information unavailable

Details

Page Title

Compte ameli - mon espace personnel

Scan Type

public

Favicon Hash

MMH3: -1661198162

MD5: 3be0f15982ba4643b076ac0f99854960

Domain Name Analysis

The domain name 'refunds.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'refunds'. The second-level label 'vercel' is 6 characters long containing 2 vowels alongside 4 consonants. Splitting it apart reveals 2 words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Compte ameli Aller au contenu | Recommandations de sécurité | PK assurance Maladie DEMANDE DE REMBOURSEMENT EN LIGNE. Veuillez renseigner vos informations personnelles. Nom de famille (sans prénom)...

Page Load Overview

0.42s

Total Load Time

131 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:447 chars

Detector Agreement:94%

All Detected Languages

🇫🇷fr(83%)🇩🇪de(17%)

Website Classification

Primary Category

healthcare medical89% confidence

Type: static

Method: ml+structural

All Detected Categories

healthcare medical

89%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	35.173.69.207Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
9	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
19	4	-	-