ScanMalware.com

Security Scan Report: mashrq.vercel.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9ad039a1-503d-4ca6-9731-02f011d38013Domain and IP registration (RDAP)/api/v1/rdap/9ad039a1-503d-4ca6-9731-02f011d38013How often this domain was scanned/api/v1/domain/stats/mashrq.vercel.appScan history for this domain/api/v1/domain/history/mashrq.vercel.app?limit=15
This website contacted 4 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://mashrq.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Phishing page impersonating Mashreq bank on a free vercel.app subdomain: Arabic login form captures username/password and a script ships data to Telegram.

Risk Factors (5)
Impersonation of Mashreq bank branding (title 'Mashreq Login', 'mashreq' logo) on a non-Mashreq domain
Credential-collecting login form (username + password) on a mismatched host
Telegram bot token embedded in page script — a credential exfiltration channel
Deceptive subdomain 'mashrq.vercel.app' on a free shared hosting namespace
Domain reputation unranked in Cisco Umbrella while claiming a major banking brand
Domain age information unavailable

Details

Page Title

Mashreq Login

Scan Type

public

Domain Name Analysis

The domain name 'mashrq.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'mashrq'. The registrable portion 'vercel' spans 6 characters holding two vowels versus 4 consonants. Segmentation suggests two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mashrq.vercel.app/

Page Load Overview

0.44s
Total Load Time
124 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:175 chars
Detector Agreement:67%

Website Classification

Primary Category

phishing scam27% confidence
Type: static
Method: ml+structural

All Detected Categories

phishing scam
27%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
364.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0135.181.63.70Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
064.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
34--

Detected Technologies2

Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T146B2969A19F710116953E4B927EB27063239D403D54ACC683F9C97888FC6A51EEB37EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:g8JrdZwBfUcC3/7bTmGl8a/Ogf14+tpwAa3fOCryH6F8c3mTaoKnyJlOOPjQOOye:hp/GF8c3FoOOLQOOY23RwVi4g/eJXHG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24206:IC2FhoSSBBOWwE1CSCQyuSgBZQBEICkFGgwNBLhGQBgAQIEgpjiSSwLAmshJUHIJ6xAQA4MCAcEKKh0JAQkmHgwbhBJc4KNR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000008ffffffffff
Perceptual Hash:890d0d37f7f72308
Difference Hash:7ff3f30053750000
Wavelet Hash:000000ffff00ffff
Color Hash:#79a4d2

Other Hashes

Crop Resistant:7ff3f30053750000,ff7f7efdfdfdfdfd

Scan History

Scan history not available

Unable to load historical scan data