Security Scan Report: auth-secure-portal.vercel.app

Redirected to:
https://block-orcin-alpha.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 6 domains to perform 18 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://auth-secure-portal.vercel.app/BlockedDashboard

Effective URL:
https://block-orcin-alpha.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Unranked vercel.app host titled 'Netflix' under an 'auth-secure-portal' name with redirects to unrelated hosts — a Netflix-brand impersonation/credential-lure page, not Netflix; do not enter credentials.

Risk Factors (5)
Impersonation of the Netflix brand on a domain that is not Netflix's official domain
Free hosting subdomain (vercel.app) with unknown creation date and no reputation
Redirect between unrelated subdomains and use of a separate external railway.app backend
Hostname 'auth-secure-portal' plus Netflix branding signals an intended account-credential lure
No credential/payment form was captured in this DOM snapshot, so the harvesting form may be rendered later or on a subsequent page
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'auth-secure-portal.vercel.app' is registered with subdomain 'auth-secure-portal'. Count 6 characters in 'vercel' with two vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://auth-secure-portal.vercel.app/BlockedDashboard

Page Load Overview

1.90s
Total Load Time
426 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da
Text Length:7 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
269.46.46.18Seattle, Washington, United States
AS400940Railway
2104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
264.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.151.119Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
189--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18DF0C9815AB04009633403402DE0F8184C59A746C2829F20BAA2A0A84FE8686CC4F96C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqC6YOLBrAMMJAGKNmI9fAbpli7vkMiBJAqIbR2+MvfWHwlT3AV4LKTj+GwlJO:hQn5KHKy7IMqsKW7VWqAEd1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:512:AAAAAAAAAAACAAEAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAFAAAACAAAAAAAAIAAAAAAAAAAAAAAAAABEACAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:956e95906e95943d
Difference Hash:4040800040e0e0e0
Wavelet Hash:00000000ffffffff
Color Hash:#ac5365

Other Hashes

Crop Resistant:4040800040e0e0e0

Scan History

Scan history not available

Unable to load historical scan data