Security Scan: Files

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c1bb01ad-2cb4-48ed-82e6-3cbf8e9bc00e Domain and IP registration (RDAP)/api/v1/rdap/c1bb01ad-2cb4-48ed-82e6-3cbf8e9bc00e Certificate Transparency/api/v1/ct/login.lhotsepension.com How often this domain was scanned/api/v1/domain/stats/wlp66.vercel.app Scan history for this domain/api/v1/domain/history/wlp66.vercel.app?limit=15

This website contacted 5 IPs in 1 country across 4 domains to perform 26 HTTP transactions. The main domain is login.lhotsepension.com and was registered 6 years ago.

Submitted URL: http://wlp66.vercel.app/

Effective URL:

https://login.lhotsepension.com/p/OC9N7Tlv1q-oQOefNocOp-IZSN7movxsmYKj...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Cloned Microsoft/Adobe login on login.lhotsepension.com self-hosting Microsoft's $Config — Evilginx-class credential/MFA phishing. Do not enter any credentials.

Risk Factors

Microsoft $Config login schema self-hosted on a non-Microsoft domain (Evilginx-class adversary-in-the-middle credential and MFA-token harvesting)

Adobe Acrobat Reader brand impersonation on a non-Adobe, unranked domain

Cross-domain redirect from a free vercel.app subdomain to login.lhotsepension.com

DevTools and right-click blocking (anti-analysis)

Network IDS HIGH alert and abused-cloud-hosting telemetry

Domain age information unavailable

Details

Page Title

Files

Scan Type

public

Domain Name Analysis

You're looking at domain 'wlp66.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'wlp66'. The core label 'vercel' covers 6 characters split between 2 vowels and 4 consonants. It segments into 2 words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.29s

Total Load Time

298 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:227 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

61%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	104.18.38.10Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	172.64.149.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	5	-	-