Security Scan: Home

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/28680062-4c0a-450d-b526-ed58705601e4 Domain and IP registration (RDAP)/api/v1/rdap/28680062-4c0a-450d-b526-ed58705601e4How often this domain was scanned/api/v1/domain/stats/v6npvwkatdm1zcuwk15.vercel.app Scan history for this domain/api/v1/domain/history/v6npvwkatdm1zcuwk15.vercel.app?limit=15

This website contacted 9 IPs in 1 country across 6 domains to perform 22 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://v6npvwkatdm1zcuwk15.vercel.app/hfgdkjmd456thwsfedvf

Effective URL:

https://xfzd85zytb-h01b.vercel.app/10025078036/hsg5hwabt3bgfdsht5dfA.h...

Redirected

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Randomized vercel.app subdomains redirecting to a JS-rendered page that hides a password field alongside 7 email inputs, with a 'Mirrored Website' phishing IDS alert and scanner-vs-client content mismatch. Indicators point to credential phishing on abused hosting.

Risk Factors (6)

Hidden password field present in DOM but not visible to the user

3 forms with 7 email/username inputs and 1 password field on a random, unranked vercel.app subdomain

Redirect chain between two unrelated randomized vercel.app subdomains (domain change) to a random .html path

Content served to residential clients differs from content served to datacenter scanners (bot-protection/evasion pattern)

Network IDS flagged a 'Mirrored Website' phishing signature and actor-abused cloud hosting use

No visible page content beyond 'Loading' — form and branding are concealed inside JavaScript

Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

The domain name 'v6npvwkatdm1zcuwk15.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'v6npvwkatdm1zcuwk15'. Count 6 characters in 'vercel' with 2 vowels and 4 consonants. It segments into two words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.44s

Total Load Time

634 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.31.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.175.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.180.104Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	9	-	-