Security Scan: Welcome Back!

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e016b455-570d-485f-b7f3-d0326407144b Domain and IP registration (RDAP)/api/v1/rdap/e016b455-570d-485f-b7f3-d0326407144bHow often this domain was scanned/api/v1/domain/stats/welcome-back-hazel.vercel.app Scan history for this domain/api/v1/domain/history/welcome-back-hazel.vercel.app?limit=15

This website contacted 12 IPs in 1 country across 7 domains to perform 14 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.welcome-back-hazel.vercel.app/

Effective URL:

https://welcome-back-hazel.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake Microsoft sign-in on a vercel.app subdomain collecting email and password, with IP-logging script. Brand impersonation plus credential form — a phishing page. Do not enter credentials.

Risk Factors (4)

Brand impersonation of Microsoft on a non-Microsoft, unranked hosting-subdomain domain

Credential form (password + multiple email/username fields) on a free instant-publish hosting tenant of unknown creation date

External IP-lookup POST from inline script — victim fingerprinting

IDS alerts for actor-abused cloud hosting service tied to this page's domain

Domain age information unavailable

Details

Page Title

Welcome Back!

Scan Type

public

Domain Name Analysis

Domain 'www.welcome-back-hazel.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.welcome-back-hazel'. The second-level label 'vercel' is 6 characters long split between two vowels and 4 consonants. Word splitting yields two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.96s

Total Load Time

641 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:280 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking60% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

60%

adult content

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.26.3.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	104.18.38.10Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
1	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
14	12	-	-