Security Scan: https://curly-doodle-iota.vercel.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/28594ce2-24dc-4ad0-ab11-70dad999733c Domain and IP registration (RDAP)/api/v1/rdap/28594ce2-24dc-4ad0-ab11-70dad999733cHow often this domain was scanned/api/v1/domain/stats/curly-doodle-iota.vercel.app Scan history for this domain/api/v1/domain/history/curly-doodle-iota.vercel.app?limit=15

This website contacted 15 IPs in 1 country across 11 domains to perform 15 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://curly-doodle-iota.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Safe Browsing flags this vercel.app page for social engineering, and it hosts a password login form on an anonymous free subdomain while an inline script carries a Telegram bot token for exfiltrating what users type. Classic credential phishing — do not enter anything.

Risk Factors (5)

Google Safe Browsing Social Engineering (phishing) detection

Credential-collecting login form (email + password) on an anonymous free-hosting subdomain

Telegram bot token embedded in inline JavaScript — collected data can be sent directly to an attacker-controlled Telegram chat

Undisclosed hidden form fields (pdf1, address, email, type) alongside the visible login fields

Network IDS alerts for actor-abused cloud hosting (vercel.app) and abused thumbnail service (image.thum.io) traffic

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'curly-doodle-iota.vercel.app' is registered; it also runs on subdomain 'curly-doodle-iota'. The second-level label 'vercel' is 6 characters long with 2 vowels and 4 consonants. Segmentation suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.50s

Total Load Time

371 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:53%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:已下架

Text Length:219 chars

Detector Agreement:100%

Language mismatch: Declared as 已下架 but detected as en

Website Classification

Primary Category

adult content28% confidence

Type: webapp

Method: ml+structural

All Detected Categories

adult content

28%

finance banking

28%

news media journalism

28%

government public service

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.152.119Google · CDN	United States	AS15169Google LLC
1	52.4.199.229Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
15	15	-	-