Security Scan Report: email-preview-redcross-dszb5pinv-swissredcross.vercel.app

Redirected to:
https://vercel.com/login?next=%2Fsso-api%3Furl%3Dhttps%253A%252F%252Fe...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 5 domains to perform 134 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://email-preview-redcross-dszb5pinv-swissredcross.vercel.app/

Effective URL:
https://vercel.com/login?next=%2Fsso-api%3Furl%3Dhttps%253A%252F%252Fe...
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Vercel's own SSO gate in front of a preview deployment named for the Swiss Red Cross; site content was never observed. No forms, Indicators of Compromise or malware, but the brand-laden disposable subdomain is unverified and warrants caution.

Risk Factors (3)
Organisation name ('swissredcross') embedded in a throwaway platform subdomain with no observable content to justify it
Site content unverifiable: only the hosting provider's access gate was served, so what the deployment actually contains could not be examined
Network IDS flagged the hosting domain as a commonly abused cloud hosting service (generic abuse reputation, informational only)
Safety Factors (5)
Final destination is vercel.com, the platform operator's genuine login domain, served with a plain access-control redirect — not an off-domain credential capture
No credential, password or payment form belonging to the scanned site; the observed form is Vercel's own authentication gate
No Indicators of Compromise, no JavaScript malware pattern, no known phishing kit and no credential exfiltration behaviour
Static content is ordinary Vercel SSO UI (Google, GitHub, SAML SSO, Passkey sign-in options) with no brand impersonation in the served page
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Login – Vercel

Scan Type

public

Domain Name Analysis

The domain 'email-preview-redcross-dszb5pinv-swissredcross.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'email-preview-redcross-dszb5pinv-swissredcross'. Count 6 characters in 'vercel' holding two vowels versus 4 consonants. It segments into two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://email-preview-redcross-dszb5pinv-swissredcross.vercel.app/

Page Load Overview

3.43s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:255 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software68% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
68%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2464.239.123.129Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
22216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
22142.251.127.84Google · CDNUnited States
AS15169Google LLC
2234.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2264.239.123.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2264.239.109.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1346--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF747228A105ED7DECEB6C4B227DAC3B264EA173DD82ECB5E4D8C91541C6075A792FC0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:rQu98OOoT8x0CQVbe7kzak7xpiuQ6PDMU+CQ2piUQ6TDMjJVzQkeu:rQu5PQnQkL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:348429:ODhYwJkhNCKpEAB4YJi2BFCAYPQR1R40oDmoCQRDEIQB0nqiLEGCIKoHjKk0BGE0BgJmIGgYADBxeAgzQOgEUqEA4MBgbQmg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b3268c88d9336677
Difference Hash:80284d4c080c0800
Wavelet Hash:60e0e0e0e3e3c7c7
Color Hash:#b7bf40

Other Hashes

Crop Resistant:80284d4c080c0800

Scan History

Scan history not available

Unable to load historical scan data