ScanMalware.com

Security Scan Report: ar24-sigma.vercel.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7fd8bbd2-0a5b-4753-bc2a-09c957bbf492Domain and IP registration (RDAP)/api/v1/rdap/7fd8bbd2-0a5b-4753-bc2a-09c957bbf492How often this domain was scanned/api/v1/domain/stats/ar24-sigma.vercel.appScan history for this domain/api/v1/domain/history/ar24-sigma.vercel.app?limit=15
This website contacted 8 IPs in 3 countries across 5 domains to perform 10 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ar24-sigma.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Page impersonates AR24, harvests credentials, and exfiltrates them externally with anti‑analysis tricks – confirmed phishing scam.

Risk Factors (5)
Brand impersonation (AR24) on unrelated subdomain
Credential harvesting form
External exfiltration of credentials
Anti‑analysis (DevTools/right‑click blocking)
Phishing IoC on primary domain
Domain age information unavailable

Details

Page Title

Connexion - AR24

Scan Type

public

Domain Name Analysis

Domain 'ar24-sigma.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'ar24-sigma'. Count 6 characters in 'vercel' with two vowels and 4 consonants. Breaking it apart gives two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ar24-sigma.vercel.app/

Page Load Overview

0.56s
Total Load Time
61 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:1,386 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical65% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
65%
government public service
62%
download file sharing
53%
corporate business
42%
blog personal website
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.198.79.195United States
AS16509Amazon.com, Inc.
1173.231.16.77United States
AS18450WebNX, Inc.
1185.183.140.161France
AS211068AR24 SAS
1185.183.140.162France
AS211068AR24 SAS
1104.237.62.213El Segundo, California, United States
AS18450WebNX, Inc.
1149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
134.117.59.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
164.29.17.195United States
AS16509Amazon.com, Inc.
108--

Detected Technologies3

PasswordField
100%
Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EEB2F91228F31D2659A7D1A63B9353C63021D003A517CA84B6DD33A48FCFE968EA37DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:1d5cNG8u2N/2NzwBikjzgJWBJ1nU1Yae1bSf3ylGIddwypNB5:9/rM/2ZYzgJWhnSYaybSf3yvwg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24564:W4AAIoDkiASkHAIJIYIxoYCKoZxGAMupAAOkp5EVkyAxCaCcwtgZQUpxSEDcR0hIIaDsBBBIBbdCAwAQgRELSCwFEkJEI8IE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefefefefefeff
Perceptual Hash:d555aa55aaa855aa
Difference Hash:0202020202020000
Wavelet Hash:0e0e0e0e0c0c0c0d
Color Hash:N/A

Other Hashes

Crop Resistant:0202020202020000

Scan History

Scan history not available

Unable to load historical scan data