Security Scan Report: www.project-bkm4y.vercel.app

Redirected to:
https://project-bkm4y.vercel.app/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 4 domains to perform 12 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.project-bkm4y.vercel.app/

Effective URL:
https://project-bkm4y.vercel.app/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Login page on a free .vercel.app subdomain whose primary domain is reported as phishing by two independent feeds; confirms the credential-capture pattern. Do not enter credentials.

Risk Factors (5)
Corroborated phishing threat-intelligence match on the exact scanned primary domain (2 independent feeds)
Credential-harvesting login form (email + password) served from a flagged, unranked free hosting subdomain
No domain reputation: not in Cisco Umbrella top 1M; subdomain age unverifiable behind the platform apex
IDS alerts for commonly actor-abused cloud hosting service
Site offers no verifiable ownership information despite presenting itself as a client-management/finance workspace
Domain age information unavailable

Details

Page Title

Ledger

Scan Type

public

Domain Name Analysis

The domain 'www.project-bkm4y.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.project-bkm4y'. Count 6 characters in 'vercel' holding two vowels versus four consonants. Segmentation suggests two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Clear books. Calm clients. A focused workspace for freelancers to track projects, log payments, and keep clients perfectly informed. 26 Ledger Studio Welcome back in to continue. Client Email

Page Load Overview

13.03s
Total Load Time
443 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:311 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical38% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
38%
finance banking
32%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
464.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
164.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
129--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186928640B40C127C6D3FAA58FAC4A72CA125B541EEE34426A10D148EE6D3FF536FAF95

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:GRrShgoq/5+O8U5Q6nBOmEAUU/cxksc64Jysq7vGy3k61ZfBmYZ:Gg1snB7cxksc64Jysq7vGT6HfBmYZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20267:JESKBSEKERUBYBmSPMNJa9gOEvtwwoALQCIBlDHAWQjhoFWcKgQEAWBATcoI1MhyaCKBYoACjAiIFAsKFCKqGNBwJXgEEcYQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0f0f0f0f0f0f0f
Perceptual Hash:9933964bf4b44b49
Difference Hash:5a5a5b189bdbd87b
Wavelet Hash:0f0f0f0f0f0f0f0f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data