Security Scan Report: alldomainsept.vercel.app

Redirected to:
https://alldomainsept.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 7 domains to perform 12 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://alldomainsept.vercel.app/

Effective URL:
https://alldomainsept.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake 'example.com Mail Authentication' portal on a free vercel.app subdomain that captures mail passwords and can exfiltrate them via a Telegram bot token. Do not enter any credentials.

Risk Factors (5)
Credential phishing form harvesting a password for a brand (example.com) the host does not belong to
Telegram bot token in inline script indicating credential exfiltration capability
Brand impersonation of example.com mail service on a vercel.app subdomain
Anti-analysis behavior (right-click blocking) plus visitor IP fingerprinting via ipapi.co/api.ipify.org
Network IDS flagged abused cloud-hosting service domains (vercel.app, image.thum.io)
Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

You're looking at domain 'alldomainsept.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'alldomainsept'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus 4 consonants. Segmentation suggests 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://alldomainsept.vercel.app/

Page Load Overview

1.59s
Total Load Time
484 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:398 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
74%
government public service
33%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.69.226Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
152.4.199.229Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.99Google · CDNUnited States
AS15169Google LLC
1216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1100.57.222.145Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1211--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15FA2E62A09F30025B523E1783FFF97083A7180079505CD28B95C5794DFC8DA56ABBBE9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:9BIBfVKDZNX4sCMflldD+3P2bs8Qf2Ofm:92BfVOfos7N/Wms8n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23234:BRCeSoKYAQALIiVA5ACEFhLEgkAHlghJyEiwgQgKqSRQgAkgbwqBwyMDvQyYzJoETCKSraa6RQsgPZElMSEkQkRCQMgBACUm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:c99c369999666699
Difference Hash:00000cb2b20c0c0c
Wavelet Hash:0f0f031bd8c0c0c0
Color Hash:#7994d2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data