Security Scan Report: ambrmotchecks.vercel.app

Redirected to:
https://f005.backblazeb2.com/file/saintpage/recuperare.htm
Site favicon
Submitted: Sep 22, 2026, 12:50:12 PMCompleted: Sep 22, 2026, 12:50:38 PMpubliccompleted

This website contacted 2 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is f005.backblazeb2.com and was registered 10 years ago.

Submitted URL: https://ambrmotchecks.vercel.app/

Effective URL:

https://f005.backblazeb2.com/file/saintpage/recuperare.htm
Redirected

AI Security Verdict

Moderate Risk

Confidence: 74%

5
Risk Score

Fake Backblaze B2 'account trouble' page hosted in an abused public bucket, redirecting users to a lookalike login host to harvest B2 credentials. Brand impersonation, no legitimate content.

Risk Factors (5)
Fabricated account-error page impersonating the Backblaze B2 brand on non-official infrastructure
Instructs users to enter B2 credentials at a deceptive lookalike domain (was.backblaze.com)
Hosted as a user-uploaded HTML file inside a public cloud-storage bucket (abused free hosting)
Entry point is an unattributable free vercel.app subdomain with no registry creation date
No legitimate business context, branding disclosure, or contact information for the page
Safety Factors (4)
No credential, password, or payment form present on this specific landing page (0 forms parsed)
No JavaScript malware (YARA) patterns, no threat-intel Indicators of Compromise, and no known malicious kit signature detected
No cross-origin credential exfiltration observed in JS behavior
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'ambrmotchecks.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'ambrmotchecks'. The second-level label 'vercel' is 6 characters long containing 2 vowels alongside four consonants. Splitting it apart reveals two words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ambrmotchecks.vercel.app/

Page Load Overview

0.60s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1149.137.136.16United States
AS40401Backblaze Inc
32--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CBE0EDD82591D90B57AC5EA3AD80E9C960B3402790C27203F3DCB90B0FF825AC94B080

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hPEhkA2U7fUVER5JQUd1RWeXXi6UysR2MC9Gu:hPiMVE2Ud1RJicssMC/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:c1e1779f8347f847e6b7e549f8f25c41

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:8c0c0c0e0f1f3f7f
Difference Hash:b000000000000000
Wavelet Hash:00fff0f0f0f0f0f0
Color Hash:#93401f

Other Hashes

Crop Resistant:b000000000000000

Scan History

Scan history not available

Unable to load historical scan data