Security Scan Report: check-poczta.vercel.app

Submitted: Sep 25, 2026, 12:45:05 AMCompleted: Sep 25, 2026, 12:45:40 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake Poczta Onet login on a vercel.app subdomain harvesting email, backup email, account owner name and password — a teardown credential-phishing page impersonating Onet.

Risk Factors (4)
Brand impersonation of a different entity's brand on a mismatched domain
Credential-capture login form (email + password) designed to harvest Poczta Onet account credentials
Deceptive hostname 'check-poczta' on a free hosting platform subdomain
Copied legal/copyright footer falsely attributing ownership to Ringier Axel Springer
Domain age information unavailable

Details

Page Title

Logowanie Poczta Onet | Bezpieczna i darmowa poczta e-mail

Scan Type

public

Domain Name Analysis

You're looking at domain 'check-poczta.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'check-poczta'. Count 6 characters in 'vercel' holding two vowels versus four consonants. Segmentation suggests two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://check-poczta.vercel.app/

Page Load Overview

1.08s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl
Text Length:525 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism51% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
51%
technology software
35%
social media network
31%
phishing scam
27%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
0192.178.183.157Google · CDNUnited States
AS15169Google LLC
0216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0192.178.183.155Google · CDNUnited States
AS15169Google LLC
35--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0A5FF711E17A92C770D31A913DE2A9B3D38DCA7BB89FC6275CC28865BCEA4035D6D04

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:r1KdNaVCBMVU91te20WQuogHbKBsU0iy+2XSoWIqnBXU5tI1dPpA7GvGpvaTi3hs:4zaVSXoe9jqoWxXUwrfKRs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2227017:vcQAAAJwCBcBoJTEgEiJDQxAUgSAKVgzFCQUoiAAKCO5oZjJQRFlEZAAoBBihLAjaVVELSKGAHvPAY0EaBAsAYg9ASGTEjER

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7ffff
Perceptual Hash:b333cc66668c9999
Difference Hash:0c0c0c0c0c0c0000
Wavelet Hash:07070303c7c7cfcf
Color Hash:#53ac93

Other Hashes

Crop Resistant:0c0c0c0c0c0c0000

Scan History

Scan history not available

Unable to load historical scan data