Security Report: request-form-9972.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d3d2554c-831b-4d1d-bef1-ab360c136d77 Domain and IP registration (RDAP)/api/v1/rdap/d3d2554c-831b-4d1d-bef1-ab360c136d77How often this domain was scanned/api/v1/domain/stats/request-form-9972.vercel.app Scan history for this domain/api/v1/domain/history/request-form-9972.vercel.app?limit=15

This website contacted 21 IPs in 1 country across 10 domains to perform 24 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://request-form-9972.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Known Meta Verified 'rewards' phishing kit on a disposable vercel.app tenant, impersonating Meta and wired to a Telegram bot token for exfiltration — do not submit any information.

Risk Factors (8)

Brand impersonation of Meta on a non-Meta vercel.app subdomain

Known phishing kit identified by the analyst-vetted roster

HIGH-precision YARA rule Meta_Verified_Rewards_Appeal_Kit

Telegram bot token embedded in page script (exfiltration capability)

Disposable shared-hosting tenant with unknown, possibly minutes-old creation date

Fabricated 'ticket id' urgency lure and 24-hour verification deadline

Google Translate endpoint abused as a submission relay to mask the collection endpoint

IDS alerts for actor-abused cloud hosting (vercel.app) and external IP lookup

Domain age information unavailable

Details

Page Title

Meta Verified - Rewards for you

Scan Type

public

Favicon Hash

MMH3: 1464185375

MD5: b8c774109eaf2eaff3cde87137d23948

Domain Name Analysis

Domain 'request-form-9972.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'request-form-9972'. The second-level label 'vercel' is 6 characters long holding 2 vowels versus 4 consonants. Breaking it apart gives two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.66s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,690 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content53% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

53%

documentation technical

49%

corporate business

46%

technology software

45%

government public service

45%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.113Google · CDN	United States	AS15169Google LLC
1	142.251.153.120Google · CDN	United States	AS15169Google LLC
1	142.251.20.95Google · CDN	United States	AS15169Google LLC
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	142.251.20.94Google · CDN	United States	AS15169Google LLC
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
24	21	-	-