Security Scan Report: 2026eapportal.vercel.app

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 5 domains to perform 16 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://2026eapportal.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake '2026 EAP Portal' on a free vercel.app subdomain collects email passwords via a staged 2FA flow, explicitly asking for 'professional email credentials'. Classic credential phishing — do not enter anything.

Risk Factors (6)
Login/password form on a free hosting subdomain with no attributable creation date
Explicit solicitation of 'professional email credentials' to view a document
Fake two-factor verification flow imitating Duo/SMS/voice token methods
Support email on a different, unrelated domain
Anti-analysis JavaScript (context-menu blocking)
Domain unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

EAP Portal 26 - Secure Access

Scan Type

public

Domain Name Analysis

You're looking at domain '2026eapportal.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain '2026eapportal'. The core label 'vercel' covers 6 characters holding two vowels versus 4 consonants. Breaking it apart gives 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Q Employee Assisstance Program 2026 EAP Portal - Secure Access Verify you are human ctounFeane tace ce Terms | Privacy | Contact | DMCA © 2024-2026 EAP Portal. Unauthorized access ts prohibited,...

Page Load Overview

0.58s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,045 chars
Detector Agreement:94%

All Detected Languages

🇺🇸en(84%)🇷🇴ro(11%)🇮🇹it(5%)

Website Classification

Primary Category

documentation technical59% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
59%
government public service
43%
technology software
34%
corporate business
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2172.217.208.95Google · CDNUnited States
AS15169Google LLC
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
168--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F513821A35F710255553E0FA6BF347893631C003D806CD187FAD67849FCAE95AEA3BA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:e+sUE2yhRFzKinToF1LnpCmLy/fv8+0cPp5PVMvtrWXRmt8IfxtTWKhSTQSW+26m:e+sUE2yNY/Lcv8WhYA5j0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42989:/QUEZQCp+ATEiMzVAASABY0khIhLCKBQgAg0ABLgQFAoJgICQIY0F14P3CHGjAuRQtNAWQNAVvoLAEIAUgEJSADRo4CCoIsY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:8d9363c8dc67c9d0
Difference Hash:d04f333332334f73
Wavelet Hash:7f039b1b9f198303
Color Hash:00007000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data