ScanMalware.com

Security Scan Report: superfimdeano.vercel.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/03c6f4c6-51bf-407c-9f6f-4db06d32cd17Domain and IP registration (RDAP)/api/v1/rdap/03c6f4c6-51bf-407c-9f6f-4db06d32cd17How often this domain was scanned/api/v1/domain/stats/superfimdeano.vercel.appScan history for this domain/api/v1/domain/history/superfimdeano.vercel.app?limit=15
This website contacted 41 IPs in 3 countries across 19 domains to perform 894 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://superfimdeano.vercel.app/?utm_source=organicjLj6ad64e91cc436525aa44e7a8&utm_campaign=&utm_medium=&utm_content=&utm_term=

AI Security Verdict

Low Risk

Confidence: 70%

3
Risk Score

Unverifiable 'Viva Sorte' prize/lottery funnel on a free vercel.app subdomain soliciting CPF, phone and PIX payments with pay-to-claim and upsell tactics; treat as advance-fee/fake-prize risk.

Risk Factors (5)
Payment/PIX solicitation on an unknown-age free hosting subdomain with no verifiable corporate identity
Fake-prize / pay-to-claim funnel language ('Pagamento Confirmado', 'Parabéns!', 'REVELAR PRÊMIO INSTANTÂNEO')
Claims to be the 'SITE OFICIAL' of a capitalización/lottery brand while hosted on an unattributable .vercel.app tenant
Collects CPF and telephone number prior to payment in an unverified sales funnel
High-pressure upsell ('200 títulos extras' ~72% off, R$ 1 milhão Sunday draw) layered on top of the supposed already-confirmed prize
Safety Factors (6)
No credential (password) or card/CVV payment fields present in the DOM; no cross-origin credential exfiltration detected
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript malware/YARA patterns and no known phishing-kit roster match
Page discloses a CNPJ and references regulated 'Títulos de Capitalização' and a named charity
Uses reCAPTCHA and standard analytics/CDN third-party scripts
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Sorte

Scan Type

public

Domain Name Analysis

The domain name 'superfimdeano.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'superfimdeano'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://superfimdeano.vercel.app/?utm_source=organicjLj6ad64e91cc436525aa44e7a8&utm_campaign=&utm_medium=&utm_content=&utm_term=

Page Load Overview

1.09s
Total Load Time
27.9 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:4,480 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking68% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
68%
healthcare medical
63%
government public service
58%
news media journalism
56%
corporate business
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5464.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
21142.250.154.95Google · CDNUnited States
AS15169Google LLC
21195.154.239.27Paris, Île-de-France, France
AS12876Scaleway SAS
21104.26.10.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
21142.251.14.94Google · CDNUnited States
AS15169Google LLC
21192.178.183.113Google · CDNUnited States
AS15169Google LLC
2123.207.210.145Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
21172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
89441--

Detected Technologies4

Bootstrap
50%
Vercel
40%
HSTS
40%
Facebook Pixel
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T198D3FA1778F330623573A0A13BA3276A3829D007E927DDB87A5D53605FC9D958CE3A9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:5K3aJjOEPFFVlKVgi7iftStaehlLShK2hhFgnHMmXrRlw:PFVlKVgi7iftS/eKK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:141478:oAIACgSKhMCAZhKSMFAKEEIAFpomGQuEqCQIhKhwrDBKOlSgJq8s2CXgCMAGmABMEocHsIByCkiFgFQAHI2BEQxkJAikFGkg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000c3ffffffff
Perceptual Hash:e44e4cf591b030f7
Difference Hash:f471a5170c868e8e
Wavelet Hash:00000000ffffffff
Color Hash:#e06c8d

Other Hashes

Crop Resistant:f471a5170c868e8e,37216373572da516

Scan History

Scan history not available

Unable to load historical scan data