Security Scan Report: www.constant-standard-cris.vercel.app

Redirected to:
https://constant-standard-cris.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.constant-standard-cris.vercel.app/

Effective URL:
https://constant-standard-cris.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Anonymous vercel.app page serving only a bare email/password form whose inline script carries a Telegram bot token for exfiltrating submissions — a disposable credential-harvesting page. Do not enter any credentials.

Risk Factors (5)
Credential login form hosted on an instant-publish free subdomain with no site identity, no branding, no About/contact/legal content
Telegram bot token in inline JavaScript enabling exfiltration of submitted data to an operator-controlled chat
Obfuscation/encoding functions in inline script alongside a password field
Two IDS alerts for actor-abused cloud hosting (vercel.app) on this page's DNS/TLS traffic
Empty page title and noindex-free throwaway structure with an 'Incorrect password, try again' lure message to induce retries
Domain age information unavailable

Details

Page Title

​

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.constant-standard-cris.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'www.constant-standard-cris'. The registrable portion 'vercel' spans 6 characters holding 2 vowels versus 4 consonants. Splitting it apart reveals 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.constant-standard-cris.vercel.app/

Page Load Overview

0.49s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:91 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism51% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
51%
government public service
46%
healthcare medical
37%
adult content
35%
e-commerce shopping
34%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
33--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12CC2B5E29DBB14959D53D19D67BE190035E18053CD02E9187F6CC2482FE9F46CABE3B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:HJMPf5A2Eyhz46v6i6Aqd4FEcD84tPVS67w0mIcf6MjTQBw:pE+6vvDsy7D84+0PuTF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27672:EAIhLZEoKLCiGieRSZgyDE8EcmPGhgCAgwauhkoMAHpWoEAgDJuGKowMZhQSKijJAhDCmIBArGEUQnoiGVAwFWBOIoCxYdiU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffefefc7c7ffef
Perceptual Hash:b3cccc338ccc33cc
Difference Hash:000010181c5c0000
Wavelet Hash:00002424e7e7ffff
Color Hash:#3a7178

Other Hashes

Crop Resistant:000010181c5c0000

Scan History

Scan history not available

Unable to load historical scan data