Security Review

Is wms-prototype-ten.vercel.app legit or a scam?

Our verdict:Suspicious· 43/100

A brand-new, anonymous login portal on a free Vercel subdomain that uses a 'prototype' lure to collect user credentials without any identifiable company branding.

wms-prototype-ten.vercel.appScanned 5h ago
0
Trust score
SUSPICIOUS
Heuristics 48·MT 40
Category tags
phishing#phishing#data harvester85% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
0 days old
Registration date unknown
MT Intelligence
Suspicious
High likelihood · 85% confidence
SUSPICIOUS

Warning signs detected

Domain was registered only 0 days ago — brand-new sites are higher-risk by default. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of wms-prototype-ten.vercel.app
LIVE RENDER
wms-prototype-ten.vercel.app

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

75
/ 100
Critical visual risk

Visual red flags detected in the screenshot

The page presents a highly suspicious, generic login portal designed to harvest credentials under the guise of accessing a 'prototype' without any corporate identity or verifiable context.

Visual risk75/100

What our vision model saw

5 signals

Generic 'Restricted Access' login portal with no identifiable company branding

Vague 'view this prototype' prompt used to solicit credentials

Minimalist design lacking standard footer links like Privacy Policy or Terms of Service

Language switcher for English, Vietnamese, and Chinese on a generic login card

Suspiciously generic 'Sign in' form without a 'Forgot Password' or 'Create Account' option

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain was registered less than 24 hours ago and is hosted on a free cloud service frequently exploited for short-lived phishing campaigns. Our page analyzer found a generic login interface that lacks standard security features like 'Forgot Password' links, privacy policies, or terms of service. The site uses a vague 'view this prototype' prompt to solicit credentials while providing no information about who owns or operates the system. This pattern is highly consistent with credential harvesting where attackers use generic business themes to trick users into reusing their corporate or personal passwords. The absence of any online footprint or business registration further confirms this is not a legitimate corporate tool.
Full dossier
Analysis complete

Page Content

The site displays a minimalist login card with a language switcher for English, Vietnamese, and Chinese. It lacks any branding, logos, or contact information, which is highly unusual for a professional Warehouse Management System (WMS).

Infrastructure

The site is hosted on a free Vercel subdomain, a common choice for attackers because it provides a valid SSL certificate and bypasses some basic reputation filters. The hosting IP has already been flagged in several abuse reports.

Domain History

The domain age is 0 days, meaning it was created immediately before this analysis. There is no historical data, no global traffic ranking, and no record of this domain being used for legitimate business purposes.

Web Reputation

No independent review sites or security databases have indexed this specific URL yet. This lack of history is a significant risk factor for a site that requires a login to access supposed business data.
Risk Factors
6
  • Domain is less than 24 hours old
  • Hosted on a free Vercel subdomain often used for phishing
  • Generic login portal lacks company branding or identification
  • Missing essential links like Privacy Policy and Terms of Service
  • Solicits credentials without a 'Forgot Password' or account creation flow
  • Hosting IP has a history of abuse reports
Positive Signals
1
  • Valid SSL certificate issued by Google Trust Services
AI Recommendation
Do not enter any credentials or personal information on this page. If you have already entered a password, change it immediately on any other accounts where you use the same or a similar password.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for wms-prototype-ten.vercel.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
0 days
Brand-new domains are higher-risk by default.
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
No scam reports found
No complaints, no negative coverage turned up in our sweep.
Key findings
7 headline facts from open-web research
  • Domain wms-prototype-ten.vercel.app is a free Vercel.app deployment with age of 0 days (newly created as of June 2026).
  • No search results mention this exact domain in any reviews, complaints, scam reports, Reddit threads, or security databases.
  • Vercel subdomains (*.vercel.app) are frequently abused for phishing, credential harvesting, and malware distribution, with multiple documented campaigns in 2025–2026.
  • Page content could not be retrieved (returned HTTP 401 Unauthorized), which is consistent with protected prototypes, private deployments, or access-controlled test sites.
  • The name "wms-prototype-ten" aligns with common developer usage for Warehouse Management System demos or internal proofs-of-concept; similar WMS prototypes exist on Vercel and elsewhere but none match this exact ID.
  • No business registration, WHOIS-linked company, or contact details found. No positive or negative third-party reviews exist.
  • Absence of any online footprint is typical for brand-new test deployments but also matches the profile of short-lived malicious prototypes on Vercel.
Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research into wms-prototype-ten.vercel.app found no existing scam reports, Reddit discussions, or third-party reviews. The domain is a free Vercel deployment with no associated business registration or corporate identity. While the name suggests a 'Warehouse Management System' prototype, the lack of any online presence or company backing is typical of short-lived phishing pages designed to harvest credentials before being detected.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious58Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age0 days old
RegistrarHidden
RegisteredUnknown
ExpiresUnknown
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WR1
ExpiresSep 26, 2026 (89d)
Self-signedNo
Hosting & Technology
HostingVercel, Inc
Server locationUS

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1308http://wms-prototype-ten.vercel.app/
  • 2401https://wms-prototype-ten.vercel.app/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file6
ISPVercel, Inc
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat wms-prototype-ten.vercel.app as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked wms-prototype-ten.vercel.app as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • wms-prototype-ten.vercel.app currently scores 43/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. wms-prototype-ten.vercel.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WR1, expiring in 89 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • wms-prototype-ten.vercel.app is 0 days old. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report wms-prototype-ten.vercel.app as clean.
  • No. wms-prototype-ten.vercel.app is not currently listed on the major browser blocklist feeds that modern browsers use.
  • wms-prototype-ten.vercel.app resolves to an IP operated by Vercel, Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 29, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around wms-prototype-ten.vercel.app have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·wms-prototype-ten.vercel.app
SUSPICIOUS

This is a generic login portal hosted on a free cloud platform that lacks any corporate identity or verifiable business information. The page is designed to harvest credentials under the guise of a 'prototype' access point. Do not enter any passwords or personal data.

Do not enter any credentials or personal information on this page. If you have already entered a password, change it immediately on any other accounts where you use the same or a similar password.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.