Security Scan: Zimbra Web Client Sign In

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f1d631bc-1f90-42a5-8c5f-52f778eb4820 Domain and IP registration (RDAP)/api/v1/rdap/f1d631bc-1f90-42a5-8c5f-52f778eb4820How often this domain was scanned/api/v1/domain/stats/zimupdate-portal.vercel.app Scan history for this domain/api/v1/domain/history/zimupdate-portal.vercel.app?limit=15

This website contacted 3 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://zimupdate-portal.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Zimbra webmail login on a vercel.app subdomain that sends entered email/password to an external submit-form.com endpoint; brand impersonation plus credential exfiltration and phishing threat-intel/IDS hits.

Risk Factors (6)

Impersonation of the Zimbra webmail login on a non-Zimbra domain

Credential harvesting form whose action points to a third-party form-relay service (submit-form.com), not to any Zimbra server

Hidden redirect/destination/flags/forcedownlevel fields mimicking a real Zimbra login POST

Single-source phishing threat-intel match on the primary domain

HIGH-severity IDS alert for a landing page with form exfiltration to submit-form.com

Instant-publish vercel.app subdomain with unknown creation date and no domain reputation

Domain age information unavailable

Details

Page Title

Zimbra Web Client Sign In

Scan Type

public

Domain Name Analysis

The domain name 'zimupdate-portal.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'zimupdate-portal'. The registrable portion 'vercel' spans 6 characters containing 2 vowels alongside 4 consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Zimbra Web Portal Email Address: Email Address Password: Password iM Stay Logged In Sign In Version! Altnigt Zimbra’ is a trademark Syna

Page Load Overview

0.16s

Total Load Time

2 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:228 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software57% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

57%

corporate business

51%

government public service

41%

adult content

39%

documentation technical

38%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	3	-	-