Security Scan Report: bnimail-owa.vercel.app

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://bnimail-owa.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Outlook webmail login on a vercel.app subdomain that ships entered usernames and passwords to an external submit-form.com endpoint — a textbook credential-phishing page impersonating Microsoft.

Risk Factors (5)
Credential-harvesting login form (2 password fields, 2 email/username fields) on a non-Microsoft domain
Brand impersonation of Microsoft Outlook without any disclosure of a third-party relationship
Cross-origin form action sending entered credentials to submit-form.com
Hosted on a free .vercel.app subdomain with an unknown, possibly very recent creation date
IDS HIGH alert for form exfiltration to submit-form.com and threat-intel phishing report on the domain
Domain age information unavailable

Details

Page Title

BNI Outlook

Scan Type

public

Domain Name Analysis

Domain 'bnimail-owa.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'bnimail-owa'. Count 6 characters in 'vercel' split between two vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

iz Outlook Domin\User ID: Email Address: Password: © Sign In

Page Load Overview

0.63s
Total Load Time
27 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:544 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
84%
documentation technical
81%
news media journalism
67%
government public service
66%
finance banking
61%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
33--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F439F3FA9572C332827607463EBB28A3B2AC417864ED924387C1758EF41D76417EBD9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ByDwuJmtz7e05Nnfvi2aD2xUkzdKV7aQblNoJmgK4e2FuzqQnclYtcY:PtzK05N7aD2xUEkF5F4nFuVcScY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57307:qOwJvYAmsFEB8AhKA6tzLBGKVwIkaDCGgMBzJIjXoJIAMIGwIDAGhQToFACWMMK0CGGATQqcxCSdMWIAC2DjAaQBlIBW4Vgi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f677010989d9fc
Difference Hash:d0ccccd8d8d0d0d0
Wavelet Hash:3f273f3f3f330000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data