Security Scan Report: docsport.vercel.app

Redirected to:
https://portlcoedu.com/injabazmishelinktoon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://docsport.vercel.app

Effective URL:
https://portlcoedu.com/injabazmishelinktoon
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake 'Security Check' gate that forwards visitors into a Microsoft OAuth flow whose redirect_uri points to admin.greatgod.cfd; a SharePoint-named document lure. Primary domain reported for phishing. Do not interact.

Risk Factors (5)
Encoded OAuth phishing redirect to Microsoft login with redirect_uri on an unrelated attacker domain (admin.greatgod.cfd)
Brand impersonation: fake SharePoint document lure used to reach a Microsoft sign-in page
Primary domain reported as phishing in threat intelligence; entry domain reported in the same event
IDS alerts for traffic to vercel.app, a commonly actor-abused cloud hosting service
Obfuscated base64 parameters and anti-automation captcha/honeypot mechanics concealed on a 'human verification' page
Domain age information unavailable

Details

Page Title

Security Check

Scan Type

public

Domain Name Analysis

The domain name 'docsport.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'docsport'. Count 6 characters in 'vercel' split between two vowels and 4 consonants. Splitting it apart reveals 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://docsport.vercel.app

Page Load Overview

2.72s
Total Load Time
105 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:216 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical56% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
56%
adult content
47%
technology software
40%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.67.129.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.21.2.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB04CF7696C75A688E22A86BE5FF2C50706275030E70E5E0B0EC52C2471E5F656E23FF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:7mowUdLkNF0e8SlWBQHMAr5HlTz9v2IUEfvns5AUxQq23uSXmH0NMFFR9:7uUfe8SlWBQsArLTz9UwU5As2i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188344:AjPAwxSBEIPgA4IJD2QScU0AiDCzAUk4QQdlxHBw9hADIoFXUEAAg1AIAACCszDAASAKMHZPgAwmgCcpAwESwAcQegfOBIsa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003b3f3f377777
Perceptual Hash:8759747671727889
Difference Hash:8cc6f2ebe3cee6c6
Wavelet Hash:00003b3f3f273777
Color Hash:#d2ad79

Other Hashes

Crop Resistant:8cc6f2ebe3cee6c6

Scan History

Scan history not available

Unable to load historical scan data