Security Scan Report: ukbuvoices.vercel.app

Redirected to:
https://ukbuvoices.vercel.app/index1.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 1 country across 11 domains to perform 35 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ukbuvoices.vercel.app/

Effective URL:
https://ukbuvoices.vercel.app/index1.html
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Phishing page impersonating Meta's verification flow on a vercel.app subdomain, harvesting login credentials and exfiltrating via a Telegram bot token. Do not enter any information.

Risk Factors (5)
Brand impersonation of Meta on an unrelated, unranked vercel.app subdomain
Login/password capture form disguised as account-verification
Telegram bot token in page scripts enabling credential exfiltration
Cross-origin geolocation lookups used to profile visitors
IDS alerts for abused cloud-hosting service and external IP lookup domains
Domain age information unavailable

Details

Page Title

Blaues Häkchen verifiziert

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'ukbuvoices.vercel.app' is registered; it also runs on subdomain 'ukbuvoices'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. Breaking it apart gives two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ukbuvoices.vercel.app/

Page Load Overview

1.32s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:3,063 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network89% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
89%

Detected Features

Login Form
Search
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.113Google · CDNUnited States
AS15169Google LLC
1142.251.127.94Google · CDNUnited States
AS15169Google LLC
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
134.117.59.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1104.26.0.100Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
3518--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168F25F11A9A5DC2A80CF59D866B3612525B99307C2124A8CFE7DABF10FAFC7CC777148

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:rnMQ4HFIIACADGkJZULQYRFgG1y33Mu80lO9aUT7FDy:rKFIZfJC9RFLlmO957FDy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37429:SrZKQQJAKsYEk2J1AUfSEkJMKhlcGFMLCwTMgk2IukIoiAAFHFAfCEYMjiECEB6BG0RgYgClBNBkgYIIgJCcCCZAw4IPtDeI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff9f9f3f0d0f0f0f
Perceptual Hash:9bccf101c2e7b06b
Difference Hash:2d29296b79585bdc
Wavelet Hash:3f1d1f1f090f0707
Color Hash:#8479d2

Scan History

Scan history not available

Unable to load historical scan data