Security Scan: Files

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2a72e7a9-7e68-4668-bf20-15faaf1de40c Domain and IP registration (RDAP)/api/v1/rdap/2a72e7a9-7e68-4668-bf20-15faaf1de40c Certificate Transparency/api/v1/ct/xbu55.vercel.app How often this domain was scanned/api/v1/domain/stats/xbu55.vercel.app Scan history for this domain/api/v1/domain/history/xbu55.vercel.app?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 20 HTTP transactions. The main domain is xbu55.vercel.app and was registered 2 months ago.

Submitted URL: http://xbu55.vercel.app/

Effective URL:

https://xbu55.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Cloned Microsoft login page on a Vercel subdomain with Microsoft's favicon and $Config schema, harvesting credentials to an external host (login.coachjosuecosta.com); flagged by Safe Browsing for social engineering. Confirmed phishing.

Risk Factors

Cloned Microsoft sign-in page hosted on a shared Vercel subdomain with a hidden cross-origin form action

Microsoft favicon and login $Config schema on a domain that is not Microsoft's

Credential form submits to an unrelated external host (login.coachjosuecosta.com)

DevTools and right-click blocking to obstruct inspection

Google Safe Browsing Social Engineering threat reported

Network IDS high alert: ET DROP Spamhaus DROP listed traffic inbound

Domain age information unavailable

Details

Page Title

Filessecondary capture

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

Domain 'xbu55.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'xbu55'. The second-level label 'vercel' is 6 characters long holding 2 vowels versus four consonants. It segments into 2 words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.00s

Total Load Time

251 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:105 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

77%

documentation technical

74%

download file sharing

66%

healthcare medical

66%

adult content

47%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
20	3	-	-