Security Report: bluebadge-status-update.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8931e3f2-dea1-4e83-b225-a1224b01a9c4 Domain and IP registration (RDAP)/api/v1/rdap/8931e3f2-dea1-4e83-b225-a1224b01a9c4How often this domain was scanned/api/v1/domain/stats/bluebadge-status-update.vercel.app Scan history for this domain/api/v1/domain/history/bluebadge-status-update.vercel.app?limit=15

This website contacted 20 IPs in 1 country across 10 domains to perform 22 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://bluebadge-status-update.vercel.app/privacy-centers.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed Meta-branded phishing kit on a free vercel.app subdomain, flagged by Safe Browsing and matched by a known malicious kit roster and YARA rule, with Telegram exfiltration scripting.

Risk Factors (7)

Brand impersonation of Meta on an unrelated disposable hosting subdomain

Known malicious phishing kit identified by analyst-vetted roster

YARA malware/phishing pattern match on the page HTML

Google Safe Browsing social-engineering threat

Telegram bot token embedded in page scripts (exfiltration channel)

Anti-DevTools script that hides/navigates away from inspecting or automated browsers

Fake 'ticket id' and verification-guide lure imitating a support/review process

Domain age information unavailable

Details

Page Title

Meta Verified - Rewards for you

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'bluebadge-status-update.vercel.app' is registered, featuring subdomain 'bluebadge-status-update'. The registrable portion 'vercel' spans 6 characters split between 2 vowels and 4 consonants. Word splitting yields 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.50s

Total Load Time

465 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,690 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content51% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

51%

documentation technical

47%

corporate business

44%

technology software

43%

government public service

42%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.102Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	142.251.153.119Google · CDN	United States	AS15169Google LLC
22	20	-	-