Security Scan Report: www.ucsg365.vercel.app

Redirected to:
https://ucsg365.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 6 domains to perform 8 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.ucsg365.vercel.app

Effective URL:
https://ucsg365.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed Microsoft credential-phishing page hosted on vercel.app, flagged by Safe Browsing for social engineering and linked to APT Kimsuky infrastructure. Never enter credentials here.

Risk Factors (5)
Brand impersonation of Microsoft on a non-Microsoft, unranked vercel.app subdomain
Credential-harvesting login form (password field present) behind a Microsoft-branded facade
Google Safe Browsing social-engineering detection
Threat-intel attribution to APT Kimsuky malware infrastructure
Page created on a free shared-hosting subdomain whose real creation date is unknown
Domain age information unavailable

Details

Page Title

Cuenta de Microsoft - Iniciar sesión

Scan Type

public

Domain Name Analysis

The domain name 'www.ucsg365.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'www.ucsg365'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and 4 consonants. Word splitting yields 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

BE Microsoft Iniciar sesión Correo electrónico, teléfono o Skype Introduce tu correo, teléfono o Skype o ¿No puede acceder a su cuenta? Ayuda y comentarios — Términos de uso ES Español (España)...

Page Load Overview

1.01s
Total Load Time
546 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:639 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
49%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
023.194.190.163Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
023.52.181.212Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
023.194.190.161Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
064.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
89--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T131C2535E24F300216993A1A86BEB57067160E0039C45DD283FAC838D5F8EE9DFA7279D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:HI9FFUF5FIipFqFCQFxFegA3pIWUq1SjZIzb:2aL1ARHtA32S1SjZIf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27605:AgNsUQHhCAwmJ0wECDCjTtsN2L/FAZ1FQmAIgggdwAwwKEIgRKAUAQ5FTwy4CAEuIwg6IEREOC4O2EIDQ1EYBE6ZipBYBD3W

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001838fcfa980000
Perceptual Hash:ddc222bde6128de1
Difference Hash:4c3032303232304e
Wavelet Hash:00b8fcffffda0800
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data