Security Report: refunds.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f45a0e81-9c37-451e-a81c-df94114e06bd Domain and IP registration (RDAP)/api/v1/rdap/f45a0e81-9c37-451e-a81c-df94114e06bdHow often this domain was scanned/api/v1/domain/stats/refunds.vercel.app Scan history for this domain/api/v1/domain/history/refunds.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 19 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://refunds.vercel.app/

Effective URL:

https://refunds.vercel.app/PortailAS/appmanager/nrgwm_cwe6zx0e4_/assur...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'Compte ameli' reimbursement portal on a vercel.app subdomain impersonating French health insurance, harvesting name, DOB, postal code, phone and a password; phishing threat intel confirms.

Risk Factors (5)

Brand impersonation of Ameli / Assurance Maladie on a non-official, free hosting subdomain

Data-harvesting form collecting identity data (name, DOB, postal code, phone) with a password field

Phishing threat-intelligence match on the primary domain

Cross-origin fetch to an unrelated, unranked pythonanywhere host

Unknown subdomain creation date on a shared hosting platform abused by threat actors

Domain age information unavailable

Details

Page Title

Compte ameli - mon espace personnel

Scan Type

public

Favicon Hash

MMH3: -1661198162

MD5: 3be0f15982ba4643b076ac0f99854960

Domain Name Analysis

The domain name 'refunds.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'refunds'. The registrable portion 'vercel' spans 6 characters with two vowels and 4 consonants. It segments into two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.53s

Total Load Time

131 KB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:447 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical89% confidence

Type: static

Method: ml+structural

All Detected Categories

healthcare medical

89%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	35.173.69.207Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
19	4	-	-