Security Report: txorliva-kext927461835.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0e03493-6ee8-4b27-84c4-44d477c0acdc Domain and IP registration (RDAP)/api/v1/rdap/b0e03493-6ee8-4b27-84c4-44d477c0acdcHow often this domain was scanned/api/v1/domain/stats/txorliva-kext927461835.vercel.app Scan history for this domain/api/v1/domain/history/txorliva-kext927461835.vercel.app?limit=15

This website contacted 18 IPs in 1 country across 12 domains to perform 34 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://txorliva-kext927461835.vercel.app/index1.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Facebook/Meta login page on a random vercel.app subdomain that harvests email and password, threatens account deletion within 24 hours, and can ship the credentials to a Telegram bot. Confirmed credential phishing.

Risk Factors (6)

Brand impersonation: presents itself as Facebook/Meta sign-in on a non-Meta domain

Credential-harvesting login form (email/phone + password) confirmed in the captured DOM

Urgent 24-hour 'your page will be permanently deleted' coercion language

Telegram bot token embedded in page scripts — credential exfiltration pathway

Cross-origin geolocation/IP-lookup requests (get.geojs.io, ipinfo.io) typical of phishing kits

Instant-hosting subdomain with a randomized name (txorliva-kext927461835) and no reputation

Domain age information unavailable

Details

Page Title

Meta für Unternehmen – Seitenattraktivität

Scan Type

public

Favicon Hash

MMH3: 117608275

MD5: 6701a4ba0b931af579be35b93631da04

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'txorliva-kext927461835.vercel.app' is registered, featuring subdomain 'txorliva-kext927461835'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus four consonants. Tokenizing the label suggests two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.62s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:3,071 chars

Detector Agreement:75%

Website Classification

Primary Category

corporate business82% confidence

Type: webapp

Method: ml+structural

All Detected Categories

corporate business

82%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.20.113Google · CDN	United States	AS15169Google LLC
1	142.251.13.94Google · CDN	United States	AS15169Google LLC
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	172.67.70.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
34	18	-	-