Security Report: outlook-silk-nine.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/66bfb283-71a2-45a2-8fc2-ce822eb38545 Domain and IP registration (RDAP)/api/v1/rdap/66bfb283-71a2-45a2-8fc2-ce822eb38545How often this domain was scanned/api/v1/domain/stats/outlook-silk-nine.vercel.app Scan history for this domain/api/v1/domain/history/outlook-silk-nine.vercel.app?limit=15

This website contacted 7 IPs in 2 countries across 5 domains to perform 7 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://outlook-silk-nine.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Microsoft 'security verification' login page on a vercel.app subdomain that harvests email/password, geolocates the visitor, and can exfiltrate captured data to Telegram; flagged by Safe Browsing for social engineering.

Risk Factors (8)

Microsoft brand impersonation on an unrelated vercel.app subdomain with no legitimate tie to Microsoft

Credential login form (email + password) behind a fake 'security verification' wall

Google Safe Browsing Social Engineering detection

Telegram bot token embedded in inline script — collection endpoint for exfiltration

Page reads the visitor's geolocation/IP via ipapi.co and renders it to appear legitimate

Obfuscated/encoded inline JavaScript (DOM APIs 615, network 60, crypto 5)

Deceptive error-state text ('Your password is incorrect. Please try again.') designed to retry credential capture

IDS alerts for actor-abused cloud hosting (vercel.app) in DNS and TLS SNI

Domain age information unavailable

Details

Page Title

Security verification - Microsoft account

Scan Type

public

Domain Name Analysis

The domain name 'outlook-silk-nine.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'outlook-silk-nine'. The second-level label 'vercel' is 6 characters long with two vowels and 4 consonants. Segmentation suggests two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.46s

Total Load Time

42 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:523 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

71%

documentation technical

33%

government public service

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	23.53.42.66Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	2.23.246.101Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
1	23.53.42.59Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	7	-	-