ScanMalware.com

Security Scan Report: roundcube-security-auth.vercel.app

Site favicon
Submitted: Aug 21, 2026, 9:53:07 AMCompleted: Aug 21, 2026, 9:54:54 AMpubliccompleted

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is roundcube-security-auth.vercel.app and was registered 6 years ago.

Submitted URL: https://roundcube-security-auth.vercel.app/[email protected]

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

High‑risk credential phishing site impersonating Roundcube Webmail; avoid interaction.

Risk Factors
Brand impersonation of Roundcube
Credential harvesting form
Unranked / unknown‑age subdomain on shared hosting
Free hosting subdomain (vercel.app) often used for phishing kits
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(55%)

Domain Information

Domain 'roundcube-security-auth.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'roundcube-security-auth'. Count 6 characters in 'vercel' containing two vowels alongside four consonants. Breaking it apart gives 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of cdnjs.cloudflare.com

Page Load Overview

0.43s
Total Load Time
6
HTTP Requests
3
Domains
215 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:73 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism55% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
55%
cryptocurrency blockchain
44%
technology software
33%
government public service
29%
healthcare medical
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.67United States
AS16509Amazon.com, Inc.
2172.67.139.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
63--

Page Statistics

6
Requests
3
Unique Domains
219.4 KB
Total Size

Detected Technologies6

PasswordField
100%
Bootstrapv5.3.2
100%
PHP
50%
Vercel
40%
HSTS
40%
RoundCube
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T123A1C90655A71862311392F037D7671EB59AC007DE4ADD24BAAC44186FCDF8BAEB33C9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nhrjG07f+zFGKWFF9aKO9C3bgC1GOfDlzbGmL3vQz50rM9j/KDlvJ:hrjGmf+zU7FF9aWDlzSGQzarwTWlB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4660:AUMEEBAAyAyQAIIBAAAwQIAZRYFAkgIQACgUghIBERBGAgMSBwQwASgAAAgKpkA4BAAAIgAEgQAGCjgEABARAAEEAwACYIAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7ffffffff
Perceptual Hash:b3338ccccc663399
Difference Hash:08080c0c00080000
Wavelet Hash:e4e4e4e40f0f0f0f
Color Hash:#3a7856

Other Hashes

Crop Resistant:08080c0c00080000

Scan History

Scan history not available

Unable to load historical scan data