Security Scan Report: ventraip-domains.vercel.app

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 8 domains to perform 13 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://ventraip-domains.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

10
Risk Score

Fake VentraIP payment-update page on a vercel.app subdomain impersonating the registrar and harvesting full card details (number, expiry, CVV) behind a captcha/code 'security check'. Do not enter payment data.

Risk Factors (5)
Impersonation of the VentraIP brand on a domain unrelated to the brand
Payment card and CVV collection on an attacker-controlled vercel.app subdomain
Subdomain on shared hosting platform (vercel.app) with unknown page creation date
Two MEDIUM network IDS alerts for actor-abused cloud hosting service (vercel.app) observed in DNS and TLS SNI
Unranked domain with a phone-verification step consistent with phishing kits
Domain age information unavailable

Details

Page Title

Update Payment Information - VentraIP

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'ventraip-domains.vercel.app' is registered and includes subdomain 'ventraip-domains'. The second-level label 'vercel' is 6 characters long holding two vowels versus 4 consonants. Splitting it apart reveals 2 words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

ventaip . Security Verification Please complete the security check to continue. (tem human G captcha Privacy Tes x 3 s a 3 2 : id 2 $ = & 5

Page Load Overview

0.90s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:641 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1310--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T182D2F97332B614356CB7D4B6A6AAA7CB75318803E443E610798C50918FCAEE35677BCC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:0f4xDg/TLbd4yHQJKHPKWncK2C3G5/ocKF3yG:Seg/cJKvKWncK2C3pcKF3H

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30162:iPfAsBKiCD8AIAlpRQApoUyQCYwQAAwKiYQZASBCmYIxEsKDqTEAJgaawQlaJiSwISQE4JEXfBHNie8nRRU+AEQC0koAWkOp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fe7e7e6feffffff
Perceptual Hash:f72688995527aacc
Difference Hash:800c0c0c00040000
Wavelet Hash:00e7e7e60e0f0f0f
Color Hash:N/A

Other Hashes

Crop Resistant:800c0c0c00040000

Scan History

Scan history not available

Unable to load historical scan data