Security Scan: Zimbra Web Client Sign In

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/874a5fb5-bea5-48ad-a487-6f4f09771970 Domain and IP registration (RDAP)/api/v1/rdap/874a5fb5-bea5-48ad-a487-6f4f09771970 Certificate Transparency/api/v1/ct/public-xi-lemon.vercel.app How often this domain was scanned/api/v1/domain/stats/public-xi-lemon.vercel.app Scan history for this domain/api/v1/domain/history/public-xi-lemon.vercel.app?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 7 HTTP transactions. The main domain is public-xi-lemon.vercel.app and was registered 32 years ago.

Submitted URL: https://www.public-xi-lemon.vercel.app

Effective URL:

https://public-xi-lemon.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Confirmed credential phishing: a fake Zimbra/Synacor sign-in page on an unranked vercel.app subdomain, with a live password form and a multi-source phishing Indicator of Compromise. Do not enter credentials.

Risk Factors (5)

Multi-source corroborated phishing Indicator of Compromise against the primary domain (2 independent feeds)

Impersonation of the Zimbra/Synacor brand on a non-official vercel.app subdomain

Live credential-entry form (password field) harvesting usernames and passwords

Hosted on an instant-publish shared platform subdomain of unknown creation date

Right-click blocking / anti-analysis JavaScript and POST of visitor data to ipapi.co

Domain age information unavailable

Details

Page Title

Zimbra Web Client Sign In

Scan Type

public

Favicon Hash

MMH3: 1624375939

MD5: 8c7d1c14e4b9c42f07bd6b800d93b806

Domain Name Analysis

You're looking at domain 'www.public-xi-lemon.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'www.public-xi-lemon'. The second-level label 'vercel' is 6 characters long containing two vowels alongside four consonants. It segments into 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.85s

Total Load Time

171 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:837 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software56% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

56%

documentation technical

33%

corporate business

32%

government public service

25%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	166.70.12.30	Lindon, Utah, United States	AS6315XMission, L.C.
7	3	-	-