Security Scan Report: securebankofamerica.vercel.app

Redirected to:
https://securebankofamerica.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 2 domains to perform 70 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://securebankofamerica.vercel.app/

Effective URL:
https://securebankofamerica.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed Bank of America credential-phishing clone hosted on a vercel.app subdomain, with a working login form harvesting User ID and passcode and two HIGH-severity phishing IDS alerts naming it specifically.

Risk Factors (5)
Impersonation of Bank of America on a non-official domain (securebankofamerica.vercel.app)
Login form collecting User ID and Password/passcode credentials
HIGH-severity IDS alerts for Bank of America cloned phishing landing pages
Free shared-hosting subdomain with unverifiable, potentially brand-new creation date
Cross-origin credential form submission to bankofamerica.com from an unrelated host
Domain age information unavailable

Details

Page Title

Bank of America | Online Banking | Log In | User ID

Scan Type

public

Domain Name Analysis

The domain 'securebankofamerica.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'securebankofamerica'. Its registrable label 'vercel' stretches across 6 characters holding 2 vowels versus 4 consonants. Breaking it apart gives two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

> ‘Skip to main content Bank of America deposit products: &FDIC-Insured - Backed by the full faith and credit of the U.S. Government Investment products are not FDIC-Insured, EBank of America Depo...

Page Load Overview

11.46s
Total Load Time
50 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:7,920 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking60% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
60%
technology software
52%
government public service
47%
documentation technical
38%
adult content
38%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14100.29.168.163Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1464.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1464.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1454.162.221.170Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
14216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
705--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159319488D9E8308540830FC0B4E3F7619526027A6149CCC4F5BC59F99BC7F9261BCB66

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:lmICsAMtvXaIse/YG7AMZEAMUVEAMc6AMrfNQ8bClv:1CeBTseZ7AM2AMUVEAMc6AMjNQ8bClv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1661:AMACIMAIQAAAAAgAwAAAAAAAAAC4AgABABAAIgAAIAAAACACQIAAAAIMAGQgACAAQIAAAAAABACABQCAAYIAAAAQAIAAEQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f3f3f3f7f1f1f0f
Perceptual Hash:8155103ef93c3f39
Difference Hash:f8c0e0e0c0e0f0d8
Wavelet Hash:063e3e1e3e1e1e06
Color Hash:N/A

Other Hashes

Crop Resistant:f8c0e0e0c0e0f0d8

Scan History

Scan history not available

Unable to load historical scan data