Security Scan Report: orange-1.vercel.app

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 8 domains to perform 35 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://orange-1.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed Orange phishing kit on vercel.app: fake CAPTCHA lure plus a login form whose password field is disguised, with JavaScript exfiltrating credentials and location to a Telegram bot and ipapi.co. Flagged by Safe Browsing for social engineering.

Risk Factors (7)
Brand impersonation of Orange (telecom) on an unrelated vercel.app subdomain
Credential harvesting form (email/mobile + password) feeding an exfiltration routine
Credential exfiltration to external services (Telegram bot API, ipapi.co geolocation)
Disguised password field (text input with password placeholder) and Unicode/character confusion evasion
Fake 'not a robot' CAPTCHA interstitials used as a lure to lower user guard
Free shared hosting subdomain with unknown actual creation date and no domain reputation
Network IDS alerts for actor-abused cloud hosting service (vercel.app)
Domain age information unavailable

Details

Page Title

Vérification Orange

Scan Type

public

Domain Name Analysis

Domain 'orange-1.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'orange-1'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Breaking it apart gives two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://orange-1.vercel.app/

Page Load Overview

0.74s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:442 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam43% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

phishing scam
43%
government public service
33%
adult content
30%
documentation technical
28%
technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
364.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.251.151.119Google · CDNUnited States
AS15169Google LLC
3185.15.59.224United States
AS14907Wikimedia Foundation Inc.
3142.251.20.100Google · CDNUnited States
AS15169Google LLC
3142.251.127.94Google · CDNUnited States
AS15169Google LLC
3185.15.59.240United States
AS14907Wikimedia Foundation Inc.
3216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.251.156.119Google · CDNUnited States
AS15169Google LLC
3142.251.154.119Google · CDNUnited States
AS15169Google LLC
3511--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19172B57311550C3A616386E4B9A5AB4E3019DB17EE5BE08CB6FC939D87C6CD3D92138C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:3i2f0a60DZSb76TeNGyeW+zzxeiQn7zZsAL0pWY5fKE:hY0DZSb76TCqhPE+A4WY5CE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16995:YgIIcAtCAALDKAEAEChLJACD0DB0FZMFR1AFMCVsUDEKGtgBOHWHQiIACGIAIeBAgSnUwRzkRqQEkOwHxAEAhlEigCBAhkkA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffe7e7ffffffff
Perceptual Hash:b3334c4c5c63674e
Difference Hash:10080d0c9c500800
Wavelet Hash:00000000043c3c3c
Color Hash:#8479d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data