Security Scan: Files

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6199c92d-0ec0-4d2a-8b88-ef3ae4e2ca87 Domain and IP registration (RDAP)/api/v1/rdap/6199c92d-0ec0-4d2a-8b88-ef3ae4e2ca87 Certificate Transparency/api/v1/ct/wlp66.vercel.app How often this domain was scanned/api/v1/domain/stats/wlp66.vercel.app Scan history for this domain/api/v1/domain/history/wlp66.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 4 domains to perform 20 HTTP transactions. The main domain is wlp66.vercel.app and was registered 5 months ago.

Submitted URL: https://www.wlp66.vercel.app/

Effective URL:

https://wlp66.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Evilginx-style phishing kit self-hosting a cloned Microsoft login page with an Adobe document lure on an unranked vercel.app subdomain; captures credentials/MFA. Do not enter any data.

Risk Factors

Microsoft login page cloned onto an unrelated vercel.app subdomain (AitM/credential phishing)

Credential-harvesting form with password field and Microsoft $Config markers

Favicon brand impersonation (Microsoft icon on non-Microsoft host)

Adobe Acrobat Reader document-download social-engineering lure in on-screen content

OpenPhish phishing threat-intelligence match on the primary domain

DevTools and right-click blocking (anti-analysis evasion)

Cross-origin credential form action to login.lhotsepension.com

Actor-abused cloud hosting namespace (vercel.app) flagged by network IDS

Unranked domain (not in Cisco Umbrella top 1M) with no legitimate brand relationship

Domain age information unavailable

Details

Page Title

Filessecondary capture

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'www.wlp66.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'www.wlp66'. The registrable portion 'vercel' spans 6 characters containing 2 vowels alongside four consonants. Breaking it apart gives two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.23s

Total Load Time

251 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:39 chars

Detector Agreement:100%

Website Classification

Primary Category

suspicious phishing41% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

suspicious phishing

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
20	4	-	-