ScanMalware.com

Security Scan Report: confirm-address.vercel.app

Redirected to:
https://block-orcin-alpha.vercel.app/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d2f1ce23-c27a-4b64-b99b-04ad564528aaDomain and IP registration (RDAP)/api/v1/rdap/d2f1ce23-c27a-4b64-b99b-04ad564528aaHow often this domain was scanned/api/v1/domain/stats/confirm-address.vercel.appScan history for this domain/api/v1/domain/history/confirm-address.vercel.app?limit=15
This website contacted 11 IPs in 1 country across 6 domains to perform 18 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://confirm-address.vercel.app/BlockedDashboard

Effective URL:
https://block-orcin-alpha.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

DHL Express-branded page on an unranked vercel.app tenant with a 'confirm-address' hostname and DHL-named railway backend — strong brand-impersonation phishing shape, though no credential form was captured.

Risk Factors (5)
Impersonation of the DHL Express brand on a domain that is not dhl.com
Free hosting-platform tenant (vercel.app) with unknown creation date and no domain reputation
Suspicious address-confirmation themed hostname with a '/BlockedDashboard' path
DHL-named back-end service hosted on railway.app
Datacenter scanner was served a bot-protection block page while a residential client saw DHL-branded content
Domain age information unavailable

Details

Page Title

DHL Express

Scan Type

public

Domain Name Analysis

The domain 'confirm-address.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'confirm-address'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus 4 consonants. Breaking it apart gives 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://confirm-address.vercel.app/BlockedDashboard

Page Load Overview

0.79s
Total Load Time
222 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:92 chars
Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain60% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
60%
government public service
56%
news media journalism
54%
healthcare medical
54%
real estate property
53%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
169.46.46.13Seattle, Washington, United States
AS400940Railway
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.151.119Google · CDNUnited States
AS15169Google LLC
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1811--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186F05C4658A18515123053405DD0FC145C95E78AD719AE4076E760AC0F98783CD8F878

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqC6YOLBrAMMJA56MJLCafAbpli7vkGtrY9zdAqIbR2+MvfWHwlpW7vV4LKTjs:hQnc6M4Py7TtrY9GqsKWiWrVfqAEd1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:628e9a3af6b33b373425a6a339ac9692

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:e699989966999999
Difference Hash:0000000c0c00000c
Wavelet Hash:0c0c3c24273f3f27
Color Hash:#d2c679

Other Hashes

Crop Resistant:0000000c0c00000c

Scan History

Scan history not available

Unable to load historical scan data