Security Scan Report: auth-secure-portal.vercel.app

Redirected to:
https://block-orcin-alpha.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 6 domains to perform 18 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://auth-secure-portal.vercel.app/

Effective URL:
https://block-orcin-alpha.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Netflix-branded page on unrelated Vercel subdomains served different content to scanner vs client — hallmark of cloaked brand-impersonation phishing infrastructure. Avoid.

Risk Factors (5)
Netflix brand used on a non-Netflix vercel.app domain
Visitor-dependent content (cloaking / bot-protection bypass) — scanner saw a different page than a real client
Credential-collection-style hostname 'auth-secure-portal' with no legitimate Netflix relationship
Redirecting between disposable Vercel subdomains and a railway.app 'netflix' backend
Unranked domain on shared hosting with unknown subdomain creation age
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

The domain 'auth-secure-portal.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'auth-secure-portal'. Its registrable label 'vercel' stretches across 6 characters with 2 vowels and 4 consonants. Word splitting yields 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://auth-secure-portal.vercel.app/

Page Load Overview

5.58s
Total Load Time
426 KB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:da
Text Length:257 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media100% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
100%
documentation technical
51%
adult content
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
269.46.46.18Mukilteo, Washington, United States
AS400940Railway
2172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.150.119Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
264.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
189--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T129B1C8315B20101EE9178395B4B0FB8D21237349F9C6C6B87AF9A760E3CCDE689175E4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:XJ+C4yNbG+NVQDTIPeMjnxm3O7qFrhYy11rZr8SJryXow+4hvCTvNof2RXoexm3d:ksdNVQ4PeMgOyndAm6JT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5326:A2RAAAMQAFBSCYAUKSDACAABWBnhQFBAAIgAAIwAGoEAQAYEVCKCUFEQRHAAcg4AoIAgSAAFgIJYgIAEIAGgJ5IGKREhgBEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3fffffffffff
Perceptual Hash:830303fefcf8f803
Difference Hash:c0c0c00000000000
Wavelet Hash:303030f0f0f0f0f0
Color Hash:#40bf60

Other Hashes

Crop Resistant:c0c0c00000000000

Scan History

Scan history not available

Unable to load historical scan data