Security Scan Report: indexxjjo.vercel.app

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 6 domains to perform 9 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://indexxjjo.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 99%

10
Risk Score

Fake Webmail credential-harvesting page on a Vercel subdomain; password form, Telegram exfiltration, Safe Browsing social engineering, and phishing IDS alerts confirm scam.

Risk Factors (6)
Fake Webmail login page harvesting email passwords
Telegram bot token in page script indicates credential/data exfiltration
Google Safe Browsing Social Engineering threat
HIGH IDS phishing and JavaScript obfuscation alerts
Hosted on a Vercel subdomain with unknown actual creation age
Single-source threat-intel report flags the primary domain as phishing
Domain age information unavailable

Details

Page Title

Webmail

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'indexxjjo.vercel.app' is registered, featuring subdomain 'indexxjjo'. Count 6 characters in 'vercel' holding two vowels versus 4 consonants. Breaking it apart gives two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

has successfully connected with Sign in to continue. Enter your eMail's Password

Page Load Overview

0.38s
Total Load Time
183 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:134 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism41% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
41%
healthcare medical
39%
finance banking
38%
government public service
37%
phishing scam
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
134.117.59.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.5United Kingdom
AS16276OVH SAS
0216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0192.178.183.95Google · CDNUnited States
AS15169Google LLC
0151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
045.43.142.3United Kingdom
AS16276OVH SAS
912--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B1523B7A54B3845F713344EBF79A3B493A409E17E084C9543BDC53849FC9A6AE4A1BCC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:DMCVIy+SFkPaIQIQANcUmyXC8LZ8SpUiJjMPWPL61LrkrCTLESoZeRiHmLEahHMV:D/SSFecb8HMP8W1Lrk2TLEfrGaMCAYT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13547:AFIgBJQCYAAkBFT0NCMBBRAlyENSAEmFMQAwAGk4LQBKgU0KEDTEAgBkYUG+xhCoIAo8t4rAwwC0QEgoBYBVAAgo6GFqGyro

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c1c1800000000
Perceptual Hash:9999ce6666319939
Difference Hash:6868b03004100000
Wavelet Hash:fcfcfcfc00000000
Color Hash:070000000f0

Other Hashes

Crop Resistant:6868b03004100000

Scan History

Scan history not available

Unable to load historical scan data