Security Scan Report: re11133.vercel.app

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 5 domains to perform 10 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://re11133.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing page on a vercel.app subdomain: a fake 'verify you're human' gate fronts an email/password form whose input is exfiltrated to a hardcoded Telegram bot. Corroborated by two phishing feeds.

Risk Factors (5)
Credential/password form combined with Telegram bot exfiltration of submitted data
Multi-feed phishing threat-intelligence match on the primary domain
Fake 'human verification' interstitial used to make the login form appear trustworthy
Anonymous hosting-platform subdomain (vercel.app) with no verifiable age or reputation
External IP lookup (api.ipify.org) plus abused-cloud-hosting IDS signatures consistent with phishing kit telemetry
Domain age information unavailable

Details

Page Title

Sign In.

Scan Type

public

Domain Name Analysis

Domain 're11133.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 're11133'. The second-level label 'vercel' is 6 characters long containing 2 vowels alongside four consonants. Segmentation suggests two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://re11133.vercel.app/

Page Load Overview

0.55s
Total Load Time
115 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:206 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical25% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
364.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
108--

Detected Technologies4

Bootstrapv5.3.0
50%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B632F862ABF9043D33A3D0B935B5AB847E31C107EE41095A396D2AD44FCAE8648777C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:w7Uq6jfD9jTZLox1JJyMZGbU+JAM7R0eyimtmfGrisLiZi4jb2UO4UWOA+:wAT5X0eyiROriyiZi4jDUW8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11831:qMgCQEiY0RgwAAICEEoUe4HQCJ6akHGgQWAgIdIIgMBwshRgoZOuGcTAEUESOiRkZREBVOAAEVEThZBQUKMwYEgEDCTGLpYG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3ffffffffff
Perceptual Hash:b13146cece9b9931
Difference Hash:00161e0000000000
Wavelet Hash:3b03033f0f0f0f0f
Color Hash:#78533a

Other Hashes

Crop Resistant:00161e0000000000

Scan History

Scan history not available

Unable to load historical scan data