Security Scan: September Documents Files

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/35a07934-58a8-4994-b53d-ceb0e8d19abb Domain and IP registration (RDAP)/api/v1/rdap/35a07934-58a8-4994-b53d-ceb0e8d19abbHow often this domain was scanned/api/v1/domain/stats/dpq89.vercel.app Scan history for this domain/api/v1/domain/history/dpq89.vercel.app?limit=15

This website contacted 11 IPs in 3 countries across 12 domains to perform 72 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://dpq89.vercel.app/

Effective URL:

https://login.iiwosbuonindussutarrial.com/p/Iv-5ErrI3DonvVgBQh2xsITZkk...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Cloned Microsoft login $Config self-hosted on a non-Microsoft domain behind a vercel.app redirect — an adversary-in-the-middle page built to harvest credentials and MFA tokens. Do not enter any credentials.

Risk Factors (6)

Cloned Microsoft login $Config self-hosted on login.iiwosbuonindussutarrial.com (Evilginx-class adversary-in-the-middle) designed to capture credentials and MFA session tokens

Password + email credential form on a domain that is not Microsoft's

Deceptive hostname and random obfuscated URL path

JavaScript blocks DevTools and right-click to hinder inspection

Brand impersonation: Microsoft login page and Adobe Acrobat imagery on non-official domains

Network IDS HIGH alert (ET DROP Spamhaus DROP Listed Traffic Inbound group 12) and abused-hosting (vercel.app) TLS SNI alerts

Domain age information unavailable

Details

Page Title

September Documents Files

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'dpq89.vercel.app' is registered with subdomain 'dpq89'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. It segments into two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.26s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:222 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software67% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

67%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	142.250.154.95Google · CDN	United States	AS15169Google LLC
6	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	192.178.183.94Google · CDN	United States	AS15169Google LLC
6	142.251.13.94Google · CDN	United States	AS15169Google LLC
6	85.11.167.134	Amsterdam, North Holland, Netherlands	AS197170TechTies Inc.
6	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
72	11	-	-