Security Report: ar24-sigma.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ae187fad-ab28-4bc1-804c-23e49606dac5 Domain and IP registration (RDAP)/api/v1/rdap/ae187fad-ab28-4bc1-804c-23e49606dac5How often this domain was scanned/api/v1/domain/stats/ar24-sigma.vercel.app Scan history for this domain/api/v1/domain/history/ar24-sigma.vercel.app?limit=15

This website contacted 9 IPs in 3 countries across 5 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://ar24-sigma.vercel.app/

Effective URL:

https://ar24-sigma.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Phishing page impersonating AR24 on ar24-sigma.vercel.app: login form harvests email/password, JavaScript exfiltrates them to a Telegram bot, DevTools blocked, and the primary domain is a multi-source phishing IoC. Do not enter credentials.

Risk Factors (5)

Credentials exfiltrated to external channel (Telegram) via JavaScript

Impersonation of AR24 brand on a non-official vercel.app subdomain

DevTools and right-click blocked to obstruct analysis

Multi-source phishing IoC against the primary domain

Domain age information unavailable

Details

Page Title

Connexion - AR24

Scan Type

public

Domain Name Analysis

The domain 'ar24-sigma.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'ar24-sigma'. The core label 'vercel' covers 6 characters containing 2 vowels alongside 4 consonants. It segments into 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

AR24 Connexion Vous avez regu des documents sécurisés AR24 Pour des raisons de vérification, une Connexion est requise avec votre adresse e-mail de réception du message et votre mat de passe habitu...

Page Load Overview

4.80s

Total Load Time

61 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:1,386 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical65% confidence

Type: webapp

Method: ml+structural

All Detected Categories

documentation technical

65%

government public service

62%

download file sharing

53%

corporate business

42%

blog personal website

36%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	185.183.140.161	France	AS211068AR24 SAS
1	173.231.16.77	United States	AS18450WebNX, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	185.183.140.162	France	AS211068AR24 SAS
1	104.237.62.213	El Segundo, California, United States	AS18450WebNX, Inc.
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
11	9	-	-