Security Report: confirm-address-changing.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/10c0eb42-4f3c-43cc-b6ec-fa0596431936 Domain and IP registration (RDAP)/api/v1/rdap/10c0eb42-4f3c-43cc-b6ec-fa0596431936 Certificate Transparency/api/v1/ct/confirm-address-changing.vercel.app How often this domain was scanned/api/v1/domain/stats/confirm-address-changing.vercel.app Scan history for this domain/api/v1/domain/history/confirm-address-changing.vercel.app?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 12 HTTP transactions. The main domain is confirm-address-changing.vercel.app and was registered 6 years ago.

Submitted URL: https://confirm-address-changing.vercel.app/landing/

AI Security Verdict

Moderate Risk

Confidence: 85%

Risk Score

The page impersonates DHL Express, uses a malicious IP and heavily obfuscated JavaScript, indicating a high‑risk brand‑impersonation scam.

Risk Factors (4)

Known malicious IP associated with the site

Brand impersonation on a hosting‑platform subdomain

Unranked domain with unknown creation date

Highly obfuscated JavaScript

Safety Factors (4)

No credential or payment collection forms

No detected malware YARA patterns

No network IDS alerts

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 5

Domain age information unavailable

Details

Page Title

DHL Express | GERMANY

Scan Type

public

Favicon Hash

MMH3: -1736813263

MD5: 9c26f4919a06da407b599a871e63d6ff

Domain Name Analysis

Domain 'confirm-address-changing.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'confirm-address-changing'. The second-level label 'vercel' is 6 characters long containing two vowels alongside four consonants. Splitting it apart reveals 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.10s

Total Load Time

340 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:52%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:3,405 chars

Detector Agreement:100%

Language mismatch: Declared as de but detected as en

Website Classification

Primary Category

technology software28% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

28%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	64.29.17.67	United States	AS16509Amazon.com, Inc.
4	216.198.79.67	United States	AS16509Amazon.com, Inc.
4	78.46.254.202	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
12	3	-	-