ScanMalware.com

Security Scan Report: confirm-address.vercel.app

Redirected to:
https://block-orcin-alpha.vercel.app/
Submitted: Oct 2, 2026, 2:45:18 AMCompleted: Oct 2, 2026, 2:46:36 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2c59f08b-2635-4598-90f6-fc03da5aebe5Domain and IP registration (RDAP)/api/v1/rdap/2c59f08b-2635-4598-90f6-fc03da5aebe5Certificate Transparency/api/v1/ct/block-orcin-alpha.vercel.appHow often this domain was scanned/api/v1/domain/stats/confirm-address.vercel.appScan history for this domain/api/v1/domain/history/confirm-address.vercel.app?limit=15

This website contacted 10 IPs in 1 country across 6 domains to perform 18 HTTP transactions. The main domain is block-orcin-alpha.vercel.app and was registered 18 years ago.

Submitted URL: http://confirm-address.vercel.app/

Effective URL:

https://block-orcin-alpha.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

DHL-branded page served from free vercel.app/railway.app subdomains with cross-host redirects, IP-lookup fingerprinting and scanner cloaking. Brand impersonation of DHL; no form fields captured, so credential capture is unconfirmed.

Risk Factors (5)
Impersonation of DHL's brand on a non-DHL, platform-hosted domain
Multiple redirects across unrelated vercel.app subdomains plus an external 'dhl-back' API host on railway.app
External IP lookup via ipify.org (visitor fingerprinting / anti-scanner behaviour)
Scanner-vs-client content mismatch (cloaked content served only to non-datacenter clients)
Unranked domain with unknown subdomain creation date
Domain age information unavailable

Details

Page Title

DHL Express

Scan Type

public

Domain Name Analysis

The domain 'confirm-address.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'confirm-address'. The registrable portion 'vercel' spans 6 characters with two vowels and 4 consonants. Word splitting yields 2 words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://confirm-address.vercel.app/

Page Load Overview

1.77s
Total Load Time
222 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da
Text Length:11 chars
Detector Agreement:0%

Website Classification

Primary Category

cryptocurrency blockchain41% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
41%
technology software
40%
documentation technical
35%
healthcare medical
30%
government public service
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
964.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
169.46.46.13Seattle, Washington, United States
AS400940Railway
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
164.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1810--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186F05C4658A18515123053405DD0FC145C95E78AD719AE4076E760AC0F98783CD8F878

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqC6YOLBrAMMJA56MJLCafAbpli7vkGtrY9zdAqIbR2+MvfWHwlpW7vV4LKTjs:hQnc6M4Py7TtrY9GqsKWiWrVfqAEd1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:628e9a3af6b33b373425a6a339ac9692

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:e699989966999999
Difference Hash:0000000c0c00000c
Wavelet Hash:00003c24273f3f27
Color Hash:#2d9bd2

Other Hashes

Crop Resistant:0000000c0c00000c

Scan History

Scan history not available

Unable to load historical scan data