Security Scan: Zimbra Web Client Sign In

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/08973301-4c51-441a-90f9-2ef107185060 Domain and IP registration (RDAP)/api/v1/rdap/08973301-4c51-441a-90f9-2ef107185060 Certificate Transparency/api/v1/ct/zimupdate-portal.vercel.app How often this domain was scanned/api/v1/domain/stats/zimupdate-portal.vercel.app Scan history for this domain/api/v1/domain/history/zimupdate-portal.vercel.app?limit=15

This website contacted 3 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is zimupdate-portal.vercel.app and was registered 6 years ago.

Submitted URL: https://zimupdate-portal.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake Zimbra webmail login on a vercel.app subdomain that harvests email and password via a cross-origin form to submit-form.com. Brand impersonation plus credential exfiltration — do not enter credentials.

Risk Factors (5)

Credential (email + password) form submits to external domain submit-form.com, not to the page's own origin

Impersonation of Zimbra/Synacor webmail login on an unrelated vercel.app subdomain

Suricata HIGH IDS alert for form exfiltration to submit-form.com

Single-source phishing threat-intel report on the primary domain

No reputation (unranked in Cisco Umbrella), no legitimacy indicators, unknown-age shared-hosting subdomain

Domain age information unavailable

Details

Page Title

Zimbra Web Client Sign In

Scan Type

public

Domain Name Analysis

The domain 'zimupdate-portal.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'zimupdate-portal'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.47s

Total Load Time

2 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:228 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software57% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

57%

corporate business

51%

government public service

40%

adult content

39%

documentation technical

38%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	3	-	-