Security Scan Report: www.auth-ar24espc-web.vercel.app

Redirected to:
https://auth-ar24espc-web.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 14 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.auth-ar24espc-web.vercel.app/

Effective URL:
https://auth-ar24espc-web.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Phishing page impersonating AR24 on a vercel.app subdomain, harvesting e-mail/password under a registered-letter pretext, with a Telegram bot token exfiltration channel; Safe Browsing flags social engineering.

Risk Factors (7)
Brand impersonation of AR24 on a non-official hosting-platform subdomain
Credential-collection form (e-mail + password) under a delivery-notification lure
Google Safe Browsing social-engineering detection
Telegram bot token embedded in page script — exfiltration channel
Cross-origin request to api.ipify.org for client IP collection
Unranked domain; subdomain creation date unknown (platform apex age not attributable)
Suricata TA_ABUSED_SERVICES alerts for abused cloud hosting / online service domains
Domain age information unavailable

Details

Page Title

AR24 - Chargement dynamique (JSON intégré)

Scan Type

public

Domain Name Analysis

Domain 'www.auth-ar24espc-web.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.auth-ar24espc-web'. The registrable portion 'vercel' spans 6 characters holding two vowels versus four consonants. Breaking it apart gives 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.auth-ar24espc-web.vercel.app/

Page Load Overview

4.03s
Total Load Time
112 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:988 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical63% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
63%
healthcare medical
46%
government public service
43%
real estate property
42%
adult content
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
364.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
144--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16AD2C536A4B31813529B9089377BA7027260A117EA02ED587BECD24C9FDDD91D9733DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:kIq4n7UgUThJ/T7IPVn+NSKC5CZOgEnFnxae1la0xHmn:Vq4n4gUThJ/PIdnESKC5CZBe1lFo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30987:SICFuMECBECMqJkEAkqBbaQACghKEaTGVIOwIduMESCocQQFBHZEkw0KGJyClgSCOCGgCyCBhxMAE3ODBxwAGFAzCCiwAtlA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e6e6eefee6e79b
Perceptual Hash:f37626f399828d88
Difference Hash:4c4c0e0a120a8833
Wavelet Hash:e6e6c2ee2c24259b
Color Hash:#2dd24e

Other Hashes

Crop Resistant:4c4c0e0a120a8833

Scan History

Scan history not available

Unable to load historical scan data