Security Scan Report: confirmenlinea5.vercel.app

Redirected to:
https://confirmenlinea5.vercel.app/index2
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://confirmenlinea5.vercel.app/

Effective URL:
https://confirmenlinea5.vercel.app/index2
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Microsoft login on a free vercel.app subdomain that collects email and password, then demands a bogus facial 'verification' — a textbook credential-phishing page. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Microsoft on an unrelated third-party domain
Credential harvesting form (email + password) under the Microsoft brand
Fabricated identity/facial-verification prompt pressuring users to submit account details
Unranked domain with no legitimate Microsoft association
Medium network IDS alerts for use of an actor-abused cloud hosting service (vercel.app)
Domain age information unavailable

Details

Page Title

Iniciar sesión

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'confirmenlinea5.vercel.app' is registered, featuring subdomain 'confirmenlinea5'. Count 6 characters in 'vercel' containing 2 vowels alongside four consonants. Word splitting yields two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://confirmenlinea5.vercel.app/

Page Load Overview

0.58s
Total Load Time
388 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:504 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software84% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
84%
social media network
74%
government public service
68%
finance banking
67%
news media journalism
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
564.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
114--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1252252A296F31967791390141BF22B492164D403D90ADA0C7FDD77A4CFC3ADAEAA374C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:0RiPimNnmi1YnIhzD/Cr27qGFjd80EwUv403fJ62s4ih6VNSmb1y5Qj3xBVsFVpe:0RGlpQOwrBe3yd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10808:qJgIxVRAAAqCQUBgkmGYW4EgSMQAbgSpm/jtmKAgcGoSyEQwFiJpCAA6UNBAAQBVMEjABShihNA1EYjhhJgWBJOAIKCDMDQS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:70405898b919090e
Perceptual Hash:d9dc2262cf998c33
Difference Hash:a18cb2326bb3d9d8
Wavelet Hash:f8c0da98bb590d2e
Color Hash:#8479d2

Other Hashes

Crop Resistant:a18cb2326bb3d9d8

Scan History

Scan history not available

Unable to load historical scan data