Security Scan: Excel Receipt

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2677b543-0c81-4fad-853d-300d4033f6dd Domain and IP registration (RDAP)/api/v1/rdap/2677b543-0c81-4fad-853d-300d4033f6ddHow often this domain was scanned/api/v1/domain/stats/index2027.vercel.app Scan history for this domain/api/v1/domain/history/index2027.vercel.app?limit=15

This website contacted 8 IPs in 2 countries across 5 domains to perform 13 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.index2027.vercel.app/

Effective URL:

https://index2027.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Microsoft-branded credential phishing on a vercel.app subdomain: a fake 'confidential Excel document' form harvests email passwords and exfiltrates them via a Telegram bot token and an external PHP endpoint.

Risk Factors (6)

Brand impersonation of Microsoft on a non-Microsoft domain

Credential harvesting form (email + password) disguised as a document unlock

Critical hunting-rule match for Telegram-exfiltrating phishing kit

Telegram bot token embedded in page script for exfiltration

Cross-origin POST of collected data to agnii.com.my

Shared hosting-platform subdomain with unknown creation date, unranked in Cisco Umbrella

Domain age information unavailable

Details

Page Title

Excel Receipt

Scan Type

public

Domain Name Analysis

The domain name 'www.index2027.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'www.index2027'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. Breaking it apart gives 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.77s

Total Load Time

167 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:247 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical46% confidence

Type: webapp

Method: ml+structural

All Detected Categories

documentation technical

46%

technology software

42%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	86.107.77.112	Germany	AS216395HostBet Cloud Technologies Private Limited
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
13	8	-	-