Security Scan Report: www.gang-1.vercel.app

Redirected to:
https://gang-1.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 6 domains to perform 10 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.gang-1.vercel.app/

Effective URL:
https://gang-1.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Microsoft sign-in on an unranked vercel.app subdomain that harvests passwords and beacons to apocrifo.click, a domain flagged as MuddyWater malware. Credential phishing.

Risk Factors (5)
Impersonation of Microsoft's sign-in interface on a non-Microsoft domain (gang-1.vercel.app)
Credential-capture form (password + username fields) on an unranked hosting-platform subdomain
Cross-origin XMLHttpRequest to apocrifo.click, flagged in threat intelligence as MuddyWater malware
Use of an actor-abused free hosting service domain (vercel.app) for a fake login page
Fake urgency/verification wording ('sign in timed-out', 'you need to verify your password')
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain 'www.gang-1.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'www.gang-1'. The second-level label 'vercel' is 6 characters long with two vowels and 4 consonants. Word splitting yields 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.gang-1.vercel.app/

Page Load Overview

3.46s
Total Load Time
57 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:246 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software58% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
58%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
364.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
123.207.210.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
113.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
1185.221.216.117London, England, United Kingdom
AS393960Host4Geeks LLC
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
123.207.210.136Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
108--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19BB3B790691439269037C73671D1BD8B62251433F737AEB7FA362CB8CF996C70A32A45

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:SxoBMCgKy+U5KazA/PWrF7qvEAFiQcpm2CkMgpC490opSQLmWqk:4oBgp4490U5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:113990:IEQlRARzgDbeBaFXMxEQEgi9L1wQRcFERMQAgGaoGDKAgAEZAEC5hCEJzAwWIMEDOUCdrBACumFoGgBIt0BFmAPOKyaqMCRQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:180018181d1f0f9f
Perceptual Hash:9c497326d999cccc
Difference Hash:7161313331357978
Wavelet Hash:191818181f1f1fff
Color Hash:#d2512d

Other Hashes

Crop Resistant:7161313331357978

Scan History

Scan history not available

Unable to load historical scan data