Security Scan Report: ly-sepia.vercel.app

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 7 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ly-sepia.vercel.app/taxiinvoicewayy.html

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing: a fake 'example.com' mail login on a vercel.app subdomain collects a password and can ship it to a Telegram bot, with IP-geolocation logging. Safe Browsing flags social engineering. Avoid entirely.

Risk Factors (6)
Safe Browsing Social Engineering (phishing) detection
Brand impersonation of example.com on an unrelated vercel.app subdomain
Password-harvesting form disguised as a mail authentication portal
Telegram bot token in inline script enabling credential exfiltration
External IP/geolocation lookups (ipapi.co, api.ipify.org) used to profile victims
Shared hosting subdomain of unknown creation date; unranked reputation
Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain name 'ly-sepia.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'ly-sepia'. Count 6 characters in 'vercel' split between two vowels and 4 consonants. Breaking it apart gives 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

HAART) + TORRE o SRE URS + TS Fa Pines BAY Lusage de ce domaine est réservé 4 des exemples de documentation, sans autorisation préalable. Il ne s'agit pas d'un service ; son utilisation 4 des fins d...

Page Load Overview

1.08s
Total Load Time
483 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:404 chars
Detector Agreement:81%

Website Classification

Primary Category

technology software73% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
73%
government public service
32%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
135.169.185.219Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.103Google · CDNUnited States
AS15169Google LLC
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.26.9.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1111--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D1A2C65A49F30415B523E1783FFF93083A7180079606CD68B95C5394DFC8DA26ABBBE9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:5BIBfVKD0dVX4sGMflldD+3P2bsY8Qf2OP:52BfVOAosfN/Wms1K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22164:UTMFDBJZTiCGJQcgcRCEgwxgIk0mkpmgIAiYUAKoBIKDIgTABIAEakYD0WhQqv3oEBAWCwbJYIFAChhlMqwBCEIIAmIgqIVB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:c998367673cc3299
Difference Hash:4cb2b2b2b2b2b24c
Wavelet Hash:f0d8d8d8d8d8d8c0
Color Hash:070000001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data