Security Scan: Files

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/63ce20d8-6f81-4479-80c0-bb9274b7ffba Domain and IP registration (RDAP)/api/v1/rdap/63ce20d8-6f81-4479-80c0-bb9274b7ffbaHow often this domain was scanned/api/v1/domain/stats/rft28.vercel.app Scan history for this domain/api/v1/domain/history/rft28.vercel.app?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 19 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://rft28.vercel.app/[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed Microsoft credential-phishing clone on rft28.vercel.app: serves Microsoft login $Config with password capture posted to login.coachjosuecosta.com, disguised by Adobe Acrobat Reader download lure. Do not enter credentials.

Risk Factors (6)

Cloned Microsoft login page hosted on vercel.app (not a Microsoft domain) with credential capture

Cross-origin credential submission to unrelated domain login.coachjosuecosta.com

Favicon brand impersonation (Microsoft favicon on non-brand host)

Lure content impersonating Adobe Acrobat Reader 'Secured Remote Attachment' download

DevTools and right-click blocking to hinder inspection

Network IDS HIGH alert: ET DROP Spamhaus DROP Listed Traffic Inbound; vercel.app flagged as abused cloud hosting (DNS + TLS SNI)

Domain age information unavailable

Details

Page Title

Filesother network

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'rft28.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'rft28'. The registrable portion 'vercel' spans 6 characters containing 2 vowels alongside 4 consonants. Tokenizing the label suggests two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.