Security Scan: Webmail Portal Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1b537aef-d38f-4adf-a527-f4e58b593801 Domain and IP registration (RDAP)/api/v1/rdap/1b537aef-d38f-4adf-a527-f4e58b593801How often this domain was scanned/api/v1/domain/stats/valuxlmstevgi-git-main-valuxlmstesting.vercel.app Scan history for this domain/api/v1/domain/history/valuxlmstevgi-git-main-valuxlmstesting.vercel.app?limit=15

This website contacted 8 IPs in 1 country across 6 domains to perform 27 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://valuxlmstevgi-git-main-valuxlmstesting.vercel.app/bgv%20copy.html

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'Webmail Portal Login' on a free vercel.app subdomain capturing email and password, with four HIGH ET PHISHING IDS alerts and a cross-origin POST of entered data to enhancednucleus.app. Do not enter credentials.

Risk Factors (5)

Credential collection (email/phone + password) on an anonymous, unranked shared-hosting subdomain

Captured data sent cross-origin to enhancednucleus.app, a domain unrelated to the page

Opaque hosting namespace where the page could have been published minutes ago; Cisco Umbrella ranking absent

Domain appears in IDS alerts as an abused cloud hosting service (vercel.app)

Deceptive generic webmail branding ('Webmail Portal Login') with no identifying operator

Domain age information unavailable

Details

Page Title

Webmail Portal Login

Scan Type

public

Domain Name Analysis

The domain 'valuxlmstevgi-git-main-valuxlmstesting.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'valuxlmstevgi-git-main-valuxlmstesting'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. Word splitting yields two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.08s

Total Load Time

204 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:152 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam38% confidence

Type: webapp

Method: ml+structural

All Detected Categories

phishing scam

38%

news media journalism

35%

adult content

32%

government public service

30%

finance banking

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.251.13.95Google · CDN	United States	AS15169Google LLC
3	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	209.94.90.1	United States	AS40680Protocol Labs
3	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
27	8	-	-