Security Scan Report: nhysoupa.vercel.app

Redirected to:
https://bboxconnecting.duckdns.org/BBOX/BBOX/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 3 domains to perform 21 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://nhysoupa.vercel.app/

Effective URL:
https://bboxconnecting.duckdns.org/BBOX/BBOX/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Cloned Bouygues Telecom Espace Client login page hosted on a duckdns.org dynamic-DNS domain reached via a Vercel subdomain, harvesting passwords through an attacker-controlled process.php. Classic credential phishing.

Risk Factors (5)
Brand impersonation: presents itself as Bouygues Telecom on a domain it does not own
Password/credential collection form on a dynamic-DNS hostname
Multi-host funnel (vercel.app -> duckdns.org) with unknown subdomain age
Dynamic DNS infrastructure flagged by IDS as potentially bad traffic
Off-brand asset sourcing mixed with attacker-controlled form destination
Domain age information unavailable

Details

Page Title

Mon compte, Espace Client forfaits mobiles, cles 4G+, cartes, Bbox et Pro - Bouygues Telecom

Scan Type

public

Domain Name Analysis

The domain name 'nhysoupa.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'nhysoupa'. The second-level label 'vercel' is 6 characters long holding two vowels versus 4 consonants. Tokenizing the label suggests two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nhysoupa.vercel.app/

Page Load Overview

1.58s
Total Load Time
407 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,639 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
45%
technology software
36%
e-commerce shopping
34%
government public service
33%
education learning
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7103.110.66.40Stockholm, Stockholm County, Sweden
AS26383Baxet Group Inc.
723.45.238.43Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
213--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E6A2093124E11CB711C3D2E2AEA29706AAA1D603C70B4A54B3FC4BE65FD2DC6CD472D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:oAsQRJdx71iFpnI8QWaGoGhkXmL9jczhzZz1Br8nAxq7mV31C/4NzyH/rVHhCZ2U:55NGSXmpjsaAs7CF2Ffnkzb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21549:QYRi8rB2RghA5CoUaIBEA0IQCgEwAgI4EBMMEDZgAiIRIAvACpIQZRrHELiCFgCkdKS56TAAA4EYxWhjqYQQBCB0JNACmZKE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3c3c3c3cff
Perceptual Hash:c60b3c6db9128f39
Difference Hash:37c9e9e9e8606c0e
Wavelet Hash:00203c3c3c3cfeff
Color Hash:#e06cd8

Scan History

Scan history not available

Unable to load historical scan data