Security Scan: Mail

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/26479b7e-5e8d-4846-a867-1f654fbff4fc Domain and IP registration (RDAP)/api/v1/rdap/26479b7e-5e8d-4846-a867-1f654fbff4fc Certificate Transparency/api/v1/ct/depgeneral.vercel.app How often this domain was scanned/api/v1/domain/stats/depgeneral.vercel.app Scan history for this domain/api/v1/domain/history/depgeneral.vercel.app?limit=15

This website contacted 15 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is depgeneral.vercel.app and was registered 13 years ago.

Submitted URL: https://depgeneral.vercel.app/

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Fake generic 'Webmail' login on a free Vercel subdomain collects email/password, embeds hidden mailer fields, runs obfuscated script flagged by IDS, and POSTs data to an unrelated third-party domain — classic credential phishing.

Risk Factors (6)

Credential-collecting login form (1 password field, 2 username/email fields) on an orphan .vercel.app subdomain whose real creation date is unknown

Cross-origin POST to an unrelated third-party PHP endpoint (zenusodonto.com.br) from a login page — indicative of credential/mail forwarding to attacker-controlled infrastructure

Obfuscated script (hex/% encoding) flagged by network IDS as Potential Bad Traffic

Hidden, non-authentication form fields (pdf1, address, email, type) embedded in the login

Deceptive 'Invalid Password' retry loop — hallmark of credential-harvesting kits

No legitimate webmail brand, ownership statement, or contact identity anywhere on the page

Domain age information unavailable

Details

Page Title

Mail

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'depgeneral.vercel.app' is registered, featuring subdomain 'depgeneral'. The core label 'vercel' covers 6 characters split between two vowels and four consonants. Breaking it apart gives 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.85s

Total Load Time

201 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:192 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business48% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business

48%

news media journalism

34%

documentation technical

31%

government public service

30%

phishing scam

28%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	142.251.110.95Google · CDN	United States	AS15169Google LLC
0	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	142.250.154.95Google · CDN	United States	AS15169Google LLC
0	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	142.251.14.95Google · CDN	United States	AS15169Google LLC
0	142.251.20.95Google · CDN	United States	AS15169Google LLC
12	15	-	-