Security Scan Report: roundcube-security-auth-chi.vercel.app

Site favicon
Submitted: Sep 29, 2026, 9:20:27 AMCompleted: Sep 29, 2026, 9:21:03 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Cloned Roundcube Webmail login on a free vercel.app subdomain, with a pre-filled target email address. No legitimate Roundcube instance runs as a static Vercel page — this is a credential phishing page.

Risk Factors (5)
Login/credential form (email + password) on a non-official domain
Brand impersonation of Roundcube Webmail on vercel.app
Subdomain on free instant-publish hosting platform with unknown creation date
Pre-filled victim email address via URL parameter
Unranked domain not in Cisco Umbrella top 1M
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Domain Name Analysis

The domain 'roundcube-security-auth-chi.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'roundcube-security-auth-chi'. Count 6 characters in 'vercel' containing 2 vowels alongside four consonants. It segments into two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://roundcube-security-auth-chi.vercel.app/?email=support@domaindb.com

Page Load Overview

1.79s
Total Load Time
219 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:73 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism55% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
55%
cryptocurrency blockchain
44%
technology software
33%
government public service
29%
healthcare medical
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.89.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.139.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
65--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186A1C90655A31462311392F037D7671D759AC007DE4ADD20B9AC44186FCDF8BAEB33C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ThrjG07f+zFGKWFF9aKO9C3bgC1GOfDlzbGmL3vQz50rM9j/KDlvJ:NrjGmf+zU7FF9aWDlzSGQzarwTWlB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4675:JABAEIAoQYAEAokIAECAgBMAIQAoEBgBoAgEATIAIxgsNABQAEKCkwgBAEACQAIDBAAYYghEJEAQgCAAUYgEDREAIQAkAAIG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7ffffffff
Perceptual Hash:b3338ccccc663399
Difference Hash:08080c0c00080000
Wavelet Hash:e4e4e4e40f0f0f0f
Color Hash:#d22d5c

Other Hashes

Crop Resistant:08080c0c00080000

Scan History

Scan history not available

Unable to load historical scan data