Security Scan Report: updatepasswrd-23l7.vercel.app

Redirected to:
https://updatepasswrd-23l7.vercel.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 1 country across 11 domains to perform 19 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://updatepasswrd-23l7.vercel.app/

Effective URL:
https://updatepasswrd-23l7.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed credential phishing page: a fake webmail login on a vercel.app subdomain with Telegram bot exfiltration, OpenPhish phishing report, and IDS alerts for abused hosting.

Risk Factors (5)
Password and email login form on shared hosting subdomain with no verifiable age
Telegram bot token in inline script indicates credential exfiltration capability
Single-source OpenPhish phishing report for the primary domain
IDS alerts for abused cloud hosting service infrastructure
Hidden form fields and JavaScript-driven form handling
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'updatepasswrd-23l7.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'updatepasswrd-23l7'. The core label 'vercel' covers 6 characters with 2 vowels and four consonants. Breaking it apart gives two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://updatepasswrd-23l7.vercel.app/

Page Load Overview

0.59s
Total Load Time
368 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:已下架
Text Length:254 chars
Detector Agreement:100%
Language mismatch: Declared as 已下架 but detected as en

Website Classification

Primary Category

documentation technical49% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
49%
news media journalism
35%
adult content
35%
government public service
34%
finance banking
32%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1964.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
0151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
0192.178.183.95Google · CDNUnited States
AS15169Google LLC
0172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.139.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.157.119Google · CDNUnited States
AS15169Google LLC
0142.251.110.105Google · CDNUnited States
AS15169Google LLC
1921--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BE74D06BA1B910C11E07F4AC26EB66407336F21BD84ADC18FA8E778CCFC564559A27CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:rFmpIKaFPphCIGX5FKV/4/9C7hx0Go6cuyEtYFkNDmqoyUtoMci0/3pYBNyH16HT:pZphCIGX+55jYi/meMci0Hn0OS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:357448:Yk4NrCWS4KCxwAkgGKB0AAMDIcYEggdAlkABBFCDBRVEACYxAAbGSMtwdADcQJPNQBAtGqFliISekhhbICFBY4EXBDBAyYEK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:27e7e7e7ffffffff
Perceptual Hash:b7378c8c8c26371d
Difference Hash:4c0c4d0c00080000
Wavelet Hash:07e7e7e700000000
Color Hash:#e06c7f

Other Hashes

Crop Resistant:4c0c4d0c00080000

Scan History

Scan history not available

Unable to load historical scan data