Security Report: erwi.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d7d31381-3d73-4c12-9cec-5827fe4b7007 Domain and IP registration (RDAP)/api/v1/rdap/d7d31381-3d73-4c12-9cec-5827fe4b7007 Certificate Transparency/api/v1/ct/erwi.vercel.app How often this domain was scanned/api/v1/domain/stats/erwi.vercel.app Scan history for this domain/api/v1/domain/history/erwi.vercel.app?limit=15

This website contacted 12 IPs in 1 country across 7 domains to perform 12 HTTP transactions. The main domain is erwi.vercel.app and was registered 23 years ago.

Submitted URL: http://erwi.vercel.app/

Effective URL:

https://erwi.vercel.app/

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

A fake 'example.com mail authentication' page on a free vercel.app subdomain that harvests email passwords and exfiltrates visitor IP data via external lookup APIs. Do not enter credentials.

Risk Factors (6)

Fake brand-styled login portal (example.com mail authentication) on an unrelated domain

Password field plus email field soliciting mail credentials

Cross-origin IP/geolocation harvesting scripts (ipapi.co, api.ipify.org)

Fabricated session details (future 2026 date, spoofed Saxony, Germany location)

Fake authentication-error loop pressuring repeated credential entry

Unranked free-hosting subdomain with unknown creation date

Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain name 'erwi.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'erwi'. Count 6 characters in 'vercel' with two vowels and 4 consonants. Tokenizing the label suggests two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.98s

Total Load Time

375 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:397 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

75%

government public service

34%

documentation technical

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	52.72.208.91Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
1	142.251.127.105Google · CDN	United States	AS15169Google LLC
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	52.6.161.198Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
12	12	-	-