ScanMalware.com

Security Scan Report: pr00nmrllca-fi.vercel.app

Redirected to:
https://rapiescapes.com/benfiprom-fi-cr/
Page Did Not Load

This page did not load for our scanner. The site may be offline, unreachable, or refusing automated visitors.

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cd175197-acad-448f-ac3c-a71c0c37eaf9Domain and IP registration (RDAP)/api/v1/rdap/cd175197-acad-448f-ac3c-a71c0c37eaf9How often this domain was scanned/api/v1/domain/stats/pr00nmrllca-fi.vercel.appScan history for this domain/api/v1/domain/history/pr00nmrllca-fi.vercel.app?limit=15
This website contacted 4 IPs in 2 countries across 4 domains to perform 7 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://pr00nmrllca-fi.vercel.app

Effective URL:
https://rapiescapes.com/benfiprom-fi-cr/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Obfuscated Vercel subdomain flagged as phishing that redirects to an unrelated domain and carries a Telegram bot token for exfiltration — a phishing routing/loader page; no legitimate purpose.

Risk Factors (5)
Primary domain carries a phishing threat-intel report (single-source)
Telegram bot token in page script enables data exfiltration to an operator-controlled chat
Cross-domain redirect to rapiescapes.com with an obfuscated lure path
Obfuscated subdomain name on a free hosting platform commonly abused for phishing
IDS alerts: Telegram API domain/requests, abused cloud hosting domain (vercel.app)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'pr00nmrllca-fi.vercel.app' is registered and includes subdomain 'pr00nmrllca-fi'. Count 6 characters in 'vercel' containing 2 vowels alongside four consonants. Breaking it apart gives 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.35s
Total Load Time
4 KB
Total Size

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
464.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
74--

Detected Technologies3

Meta-Refresh-Redirect
100%
Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data