Security Scan: Home

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0485fed9-0f05-4dcd-a1b0-3e008292f8d7 Domain and IP registration (RDAP)/api/v1/rdap/0485fed9-0f05-4dcd-a1b0-3e008292f8d7How often this domain was scanned/api/v1/domain/stats/v6npvwkatdm1zcuwk15.vercel.app Scan history for this domain/api/v1/domain/history/v6npvwkatdm1zcuwk15.vercel.app?limit=15

This website contacted 9 IPs in 1 country across 5 domains to perform 22 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://v6npvwkatdm1zcuwk15.vercel.app/hfgdkjmd456thwsfedvf.html

Effective URL:

https://cnli71sqmu-h01u.vercel.app/10025078036/hsg5hwabt3bgfdsht5dfA.h...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

Risk Score

Cloaked credential-phishing page on rotating random vercel.app subdomains: hidden password field, cross-origin form submission to another throwaway subdomain, IP-lookup victim filtering and a phish IDS alert.

Risk Factors (7)

Hidden password field present in DOM but not rendered on screen (orphan credential field)

Cross-origin form post to an unrelated, rotating .vercel.app subdomain (credential exfiltration to attacker-controlled endpoint)

Multiple redirects with hostname change to another random-character vercel.app subdomain

Bot-protection / cloaked content: different page served to scanner vs. residential client

External IP-geolocation lookup (ipapi.co) embedded in page flow for victim filtering

Unranked, no reputation, anonymous free-hosting subdomain with no legitimate branding

Suricata ET PHISHING mirrored-website alert and abused-cloud-hosting alerts for vercel.app

Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

Domain 'v6npvwkatdm1zcuwk15.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'v6npvwkatdm1zcuwk15'. The registrable portion 'vercel' spans 6 characters holding 2 vowels versus 4 consonants. It segments into 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.10s

Total Load Time

635 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.31.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.180.104Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	9	-	-