Security Report: ar24-sigma.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0fd150b-a391-4abe-bfcb-e42db635e6ee Domain and IP registration (RDAP)/api/v1/rdap/b0fd150b-a391-4abe-bfcb-e42db635e6eeHow often this domain was scanned/api/v1/domain/stats/ar24-sigma.vercel.app Scan history for this domain/api/v1/domain/history/ar24-sigma.vercel.app?limit=15

This website contacted 9 IPs in 3 countries across 5 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://ar24-sigma.vercel.app/

Effective URL:

https://ar24-sigma.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed AR24 credential-phishing kit on a vercel.app subdomain: fake login page whose script exfiltrates e-mail and password to a Telegram bot, with DevTools blocking and a multi-source phishing threat-intel match.

Risk Factors (5)

Brand impersonation of AR24 on an unrelated vercel.app subdomain

Credential phishing form (e-mail + password) collecting data for AR24's user base

Credential exfiltration to an external Telegram bot via hard-coded bot token

Anti-analysis techniques (DevTools and right-click blocking) co-occurring with credential capture

Multi-source phishing threat-intelligence match on the scanned domain; unranked in Cisco Umbrella

Domain age information unavailable

Details

Page Title

Connexion - AR24

Scan Type

public

Domain Name Analysis

You're looking at domain 'ar24-sigma.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'ar24-sigma'. The registrable portion 'vercel' spans 6 characters with two vowels and four consonants. Segmentation suggests two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.70s

Total Load Time

61 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:1,386 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service63% confidence

Type: webapp

Method: ml+structural

All Detected Categories

government public service

63%

documentation technical

61%

download file sharing

51%

blog personal website

40%

corporate business

38%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	185.183.140.162	France	AS211068AR24 SAS
1	104.237.62.213	El Segundo, California, United States	AS18450WebNX, Inc.
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	185.183.140.161	France	AS211068AR24 SAS
1	173.231.16.77	United States	AS18450WebNX, Inc.
1	149.154.166.110	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
11	9	-	-