Security Scan: Vérification Orange

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c197fbde-41b3-4d54-99c3-51f48299e4a4 Domain and IP registration (RDAP)/api/v1/rdap/c197fbde-41b3-4d54-99c3-51f48299e4a4How often this domain was scanned/api/v1/domain/stats/orange-1.vercel.app Scan history for this domain/api/v1/domain/history/orange-1.vercel.app?limit=15

This website contacted 11 IPs in 1 country across 8 domains to perform 35 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://orange-1.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Phishing kit impersonating Orange on a vercel.app subdomain: fake image CAPTCHA gate leads to a credential form whose password field is disguised and exfiltrated via Telegram. Safe Browsing social-engineering hit. Do not enter credentials.

Risk Factors (7)

Credential harvesting form impersonating the Orange brand on an unrelated vercel.app subdomain

Confirmed credential exfiltration to an external channel via a Telegram bot

Disguised password field with unicode confusion evasion techniques

Google Safe Browsing social-engineering detection

Cloud-hosting tenant domain with unknown creation date and no domain reputation

Deceptive multi-step 'human verification' image puzzle preceding the login prompt

Network IDS alerts for actor-abused cloud hosting service (vercel.app) in DNS query and TLS SNI

Domain age information unavailable

Details

Page Title

Vérification Orange

Scan Type

public

Domain Name Analysis

Domain 'orange-1.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'orange-1'. Its registrable label 'vercel' stretches across 6 characters with two vowels and four consonants. Breaking it apart gives 2 words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.86s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:442 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam43% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

phishing scam

43%

government public service

33%

adult content

30%

documentation technical

28%

technology software

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.251.156.119Google · CDN	United States	AS15169Google LLC
3	185.15.59.224	United States	AS14907Wikimedia Foundation Inc.
3	142.251.14.113Google · CDN	United States	AS15169Google LLC
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
3	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.251.150.119Google · CDN	United States	AS15169Google LLC
3	142.251.14.139Google · CDN	United States	AS15169Google LLC
3	192.178.183.94Google · CDN	United States	AS15169Google LLC
35	11	-	-