Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/78b329b2-a6f4-493a-996b-7db04207df36 Domain and IP registration (RDAP)/api/v1/rdap/78b329b2-a6f4-493a-996b-7db04207df36How often this domain was scanned/api/v1/domain/stats/novoempressapo-veriprotocol.vercel.app Scan history for this domain/api/v1/domain/history/novoempressapo-veriprotocol.vercel.app?limit=15

This website contacted 12 IPs in 3 countries across 6 domains to perform 18 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://novoempressapo-veriprotocol.vercel.app

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed phishing clone of SAPO webmail hosted on a vercel.app subdomain, flagged by Safe Browsing for social engineering, capturing e-mail/password and wired to a Telegram bot token for exfiltration. Do not enter credentials.

Risk Factors (6)

Google Safe Browsing Social Engineering detection

Brand impersonation of SAPO webmail on an unrelated hosting subdomain

Credential capture form (password + e-mail) on a page that cannot legitimately need it

Telegram bot token in inline JavaScript enabling exfiltration of captured data

Free hosting subdomain with no attributable creation date and no domain reputation

IDS alerts for actor-abused cloud hosting (vercel.app) in DNS and TLS SNI

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

The domain 'novoempressapo-veriprotocol.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'novoempressapo-veriprotocol'. Count 6 characters in 'vercel' holding two vowels versus four consonants. Breaking it apart gives 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

@ SAPO Enderego de e-mail BZ introduza o seu enderego de e-ma Palavra-passe A ntocuza a palavra-passe do seu Iniciar sessao English aul Gtsnrapcxn ——eStina~— dansk ~—Deutsch_——EAAnvimt Copyrigh...

Page Load Overview

3.20s

Total Load Time

122 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,453 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

37%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	190.183.195.2	Santo Tomé, Santa Fe, Argentina	AS20207Gigared S.A.
1	45.43.142.5	United Kingdom	AS16276OVH SAS
1	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	12	-	-