Security Scan Report: peee-dash-zim-six.vercel.app

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://peee-dash-zim-six.vercel.app/zimba.html

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Zimbra login page on a free Vercel subdomain that harvests email/password and sends them to an external form service. Confirmed credential phishing — do not enter any credentials.

Risk Factors (5)
Brand impersonation of Zimbra on a domain not owned by Zimbra/Synacor
Password field exfiltrated to an external form-submission service (formsubmit.co)
Primary domain flagged as phishing by threat intelligence
Free/shared Vercel subdomain with no attributable domain age
Hidden redirect/CSRF-style fields (loginOp, login_csrf) copied from a real Zimbra login page
Domain age information unavailable

Details

Page Title

Zimbra Web Client Sign In

Scan Type

public

Domain Name Analysis

The domain name 'peee-dash-zim-six.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'peee-dash-zim-six'. The core label 'vercel' covers 6 characters containing 2 vowels alongside 4 consonants. Splitting it apart reveals two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://peee-dash-zim-six.vercel.app/zimba.html

Page Load Overview

80.09s
Total Load Time
7 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:738 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software59% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
59%
corporate business
35%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0129.153.230.99Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
0216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
23--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12EA2F96625E41C6106E7A0F858CF521938B59C2701099E087DFC91EC3FB5EAA52E3BBD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:HuDRR4lO3khkWUT4O+YXhl2Ei0mTwGp+p4tBiYiWiJi7Ui4ieiAisiniXimV5eib:ODr3khkWUT4O+6tcjtI1nQ7JVvdhiSmL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21838:QBJAnQGIERhgcCQCjQKoECAc0khKscEAgZEzQAFrGvBG2qGQAWGEQCLORkUUmJkASkKoW2GnZIMkgDoDGCExwuCECRoFACMA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f1f0707ffffffff
Perceptual Hash:8000c0cfef3f373b
Difference Hash:c0b0bcb400000000
Wavelet Hash:3f000303f0f0f0f0
Color Hash:#2dd298

Other Hashes

Crop Resistant:c0b0bcb400000000

Scan History

Scan history not available

Unable to load historical scan data