Security Scan Report: auth-secure-portal.vercel.app

Redirected to:
https://block-orcin-alpha.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 4 domains to perform 16 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://auth-secure-portal.vercel.app/Nets

Effective URL:
https://block-orcin-alpha.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Netflix-branded page on a throwaway vercel.app 'auth-secure-portal' host that redirects to another vercel tenant — brand impersonation with a single-source phishing report; no login form was captured, but treat as hostile.

Risk Factors (5)
Impersonates the Netflix brand on a non-Netflix vercel.app subdomain
Deceptive 'auth-secure-portal' hostname and redirect to a second unrelated vercel.app tenant
Single-source (unverified) phishing report against the primary domain
Shared hosting namespace (vercel.app) where the page's real creation date is unknown
External IP-lookup calls (api.ipify.org) — common in phishing kits for visitor filtering
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

The domain 'auth-secure-portal.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'auth-secure-portal'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Word splitting yields 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://auth-secure-portal.vercel.app/Nets

Another page of the site in scan f59c3aad

Page Load Overview

0.35s
Total Load Time
425 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da
Text Length:7 chars
Detector Agreement:0%

Website Classification

Primary Category

documentation technical33% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
169.46.46.18Mukilteo, Washington, United States
AS400940Railway
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.154.120Google · CDNUnited States
AS15169Google LLC
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1610--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18DF0C9815AB04009633403402DE0F8184C59A746C2829F20BAA2A0A84FE8686CC4F96C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqC6YOLBrAMMJAGKNmI9fAbpli7vkMiBJAqIbR2+MvfWHwlT3AV4LKTj+GwlJO:hQn5KHKy7IMqsKW7VWqAEd1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:512:AAAAAAAAAAACAAEAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAFAAAACAAAAAAAAIAAAAAAAAAAAAAAAAABEACAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:956e95906e95943d
Difference Hash:4040800040e0e0e0
Wavelet Hash:00000000ffffffff
Color Hash:#c3c587

Other Hashes

Crop Resistant:4040800040e0e0e0

Scan History

Scan history not available

Unable to load historical scan data