ScanMalware.com

Security Scan Report: test-mu-six-17.vercel.app

Redirected to:
https://test-mu-six-17.vercel.app/en/next.html
Submitted: Sep 23, 2026, 12:45:07 PMCompleted: Sep 23, 2026, 12:45:35 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c57d5ea6-02f2-4220-ad82-ce70f611d6daDomain and IP registration (RDAP)/api/v1/rdap/c57d5ea6-02f2-4220-ad82-ce70f611d6daCertificate Transparency/api/v1/ct/test-mu-six-17.vercel.appHow often this domain was scanned/api/v1/domain/stats/test-mu-six-17.vercel.appScan history for this domain/api/v1/domain/history/test-mu-six-17.vercel.app?limit=15

This website contacted 10 IPs in 3 countries across 7 domains to perform 15 HTTP transactions. The main domain is test-mu-six-17.vercel.app and was registered 18 years ago.

Submitted URL: http://test-mu-six-17.vercel.app/en/next.html

Effective URL:

https://test-mu-six-17.vercel.app/en/next.html
Redirected

Downloads:

AI Security Verdict

Confirmed Scam

Confidence: 93%

10
Risk Score

Confirmed phishing/social-engineering page impersonating DocuSign and ScreenConnect on a vercel.app subdomain, pushing a fake 'download and sign' install. Safe Browsing Social Engineering hit plus phishing IoC. Do not interact.

Risk Factors (6)
Brand impersonation of DocuSign (signature service) and ScreenConnect on a non-official domain
Social-engineering download/install bait rather than a real document viewer
Free hosting subdomain (vercel.app) with unknown page creation age
Unranked domain (not in Cisco Umbrella top 1M) claiming to be a major brand
Telegram API and ipify external lookups plus 12 network IDS alerts (Vercel abused-hosting, Telegram)
Third-party IoC on linked resource (149.154.166.110 known attacker)
Domain age information unavailable

Details

Page Title

e-sign

Scan Type

public

Domain Name Analysis

You're looking at domain 'test-mu-six-17.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'test-mu-six-17'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Tokenizing the label suggests two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://test-mu-six-17.vercel.app/en/next.html

Page Load Overview

3.69s
Total Load Time
254 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:192 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical41% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
41%
technology software
38%
entertainment media
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
664.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1185.15.59.240United States
AS14907Wikimedia Foundation Inc.
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
145.43.142.4United Kingdom
AS16276OVH SAS
1149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1510--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F912D60343A34235680B81BC5BB365043066C817A274E9F47F9F4555EF4DBE06AAA7DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BrRS25sVcO3yEAA9eRzp9wRJ6hcmU+RvVa2HMpJEBqcdF:BrrtU4vVa20EBqcj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9148:FoEMAQCElGQlksFgUAdIxRaI4QUBCSGQIBODb0upomHgFSMBEUxP0oRChJFCKAKGAoQDkAkNlA0CKQIACCjBCiSLwcQugpYp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffc7c7c3cbefff
Perceptual Hash:b9c6c73906c73938
Difference Hash:e0101c0e969a1822
Wavelet Hash:00cfc7c38381cfe7
Color Hash:#53bf40

Other Hashes

Crop Resistant:e0101c0e969a1822,3c2f5b87873b03c1

Scan History

Scan history not available

Unable to load historical scan data