Security Scan Report: b-b-e.vercel.app

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 15 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://b-b-e.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake OneDrive document-sharing lure on a throwaway .vercel.app subdomain, with a hidden Telegram bot-token channel and ipapi.co profiling. Impersonates Microsoft; do not click 'Dokument anzeigen'.

Risk Factors (5)
Brand impersonation of OneDrive/Microsoft on a free hosting-platform subdomain
Telegram bot token embedded in page script capable of exfiltrating collected data
Geolocation lookup to ipapi.co and Telegram API egress from a simple 'document preview' page
Honeypot field indicating a phishing kit template
Deceptive document-sharing lure with fabricated file metadata and future date
Domain age information unavailable

Details

Page Title

OneDrive – Dokument verfügbar

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'b-b-e.vercel.app' is registered; it also runs on subdomain 'b-b-e'. The second-level label 'vercel' is 6 characters long split between two vowels and 4 consonants. It segments into two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Io] OneDrive Meine Dateien Geteilt Letzte Papierkorb © © Dokument_vertraulich.pdt Dokument vertraulich.pdf EE PDF-Dokument * 36 MB * Verschlusselt Geteilt von Behzad Forstl Leitung Netzwerkbetre...

Page Load Overview

1.29s
Total Load Time
668 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:483 chars
Detector Agreement:50%

Website Classification

Primary Category

download file sharing78% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
78%
documentation technical
63%
technology software
55%
cryptocurrency blockchain
35%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.69.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
156--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D3A2575B63A31425BD13E0A95FA753063225E403D80BC96D3FDC5398CFCA589ADA37AC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:NIUOYlCQKgDpmWelzZn+4/JwJbcqXi1hKd+5avHnQQeQWtcnRo1MSmmR+JqF3ZhU:NILMb1k3ZGlJRp9VWFe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21736:sDEFihIA2CJRzAoIER8qBABJKhTFAi8CQT8JjLKHAgDAZicIJUAAWoYigACtalN4kU6g0kHALGBhDiQJALAFIhlVUDIclMQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0058582c5c000000
Perceptual Hash:999966669b26c699
Difference Hash:28141058584c1400
Wavelet Hash:0f0b3f3f2c241c00
Color Hash:N/A

Other Hashes

Crop Resistant:28141058584c1400

Scan History

Scan history not available

Unable to load historical scan data