Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/899ba517-d292-4586-9dc5-a920c8cb3540 Domain and IP registration (RDAP)/api/v1/rdap/899ba517-d292-4586-9dc5-a920c8cb3540How often this domain was scanned/api/v1/domain/stats/novoempressapo-veriprotocol.vercel.app Scan history for this domain/api/v1/domain/history/novoempressapo-veriprotocol.vercel.app?limit=15

This website contacted 9 IPs in 3 countries across 6 domains to perform 18 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://novoempressapo-veriprotocol.vercel.app

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake SAPO webmail login on a vercel.app subdomain that collects email and password and carries a Telegram bot token for exfiltration — credential phishing.

Risk Factors (5)

Impersonation of SAPO (Portuguese mail provider) on a non-official domain

Credential form capturing email and password

Telegram bot token in inline script enabling credential exfiltration

Unknown-age free hosting subdomain mimicking a webmail service

IDS alerts for actor-abused cloud hosting platform

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

Domain 'novoempressapo-veriprotocol.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'novoempressapo-veriprotocol'. The second-level label 'vercel' is 6 characters long holding two vowels versus four consonants. Breaking it apart gives two words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

@ SAPO Enderego de e-mail BZ introduza o seu enderego de e-ma Palavra-passe A ntocuza a palavra-passe do seu Iniciar sessao English aul Gtsnrapcxn ——eStina~— dansk ~—Deutsch_——EAAnvimt Copyrigh...

Page Load Overview

3.46s

Total Load Time

122 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,453 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

37%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
2	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	190.183.195.2	Santo Tomé, Santa Fe, Argentina	AS20207Gigared S.A.
2	45.43.142.2	United Kingdom	AS16276OVH SAS
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
18	9	-	-