Security Scan Report: www.alldomainsept.vercel.app

Redirected to:
https://alldomainsept.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 1 country across 8 domains to perform 13 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.alldomainsept.vercel.app/

Effective URL:
https://alldomainsept.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake 'example.com Mail Authentication' portal on a free vercel.app subdomain that captures mail passwords and can exfiltrate them via a Telegram bot token. Do not enter any credentials.

Risk Factors (5)
Credential phishing form harvesting a password for a brand (example.com) the host does not belong to
Telegram bot token in inline script indicating credential exfiltration capability
Brand impersonation of example.com mail service on a vercel.app subdomain
Anti-analysis behavior (right-click blocking) plus visitor IP fingerprinting via ipapi.co/api.ipify.org
Network IDS flagged abused cloud-hosting service domains (vercel.app, image.thum.io)
Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain name 'www.alldomainsept.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.alldomainsept'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. Splitting it apart reveals two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.alldomainsept.vercel.app/

Page Load Overview

3.30s
Total Load Time
485 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:398 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
74%
government public service
33%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
164.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.69.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
152.4.199.229Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1142.251.153.119Google · CDNUnited States
AS15169Google LLC
1142.251.20.104Google · CDNUnited States
AS15169Google LLC
1216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1313--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15FA2E62A09F30025B523E1783FFF97083A7180079505CD28B95C5794DFC8DA56ABBBE9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:9BIBfVKDZNX4sCMflldD+3P2bs8Qf2Ofm:92BfVOfos7N/Wms8n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23234:BRCeSoKYAQALIiVA5ACEFhLEgkAHlghJyEiwgQgKqSRQgAkgbwqBwyMDvQyYzJoETCKSraa6RQsgPZElMSEkQkRCQMgBACUm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:cd9836999966269b
Difference Hash:00000cb2b20c0c0c
Wavelet Hash:cfcfc3dbd8c0c0c0
Color Hash:#2dd29e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data