Security Scan Report: y8w2f1.vercel.app

Redirected to:
https://y8w2f1.vercel.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 5 domains to perform 13 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://y8w2f1.vercel.app/

Effective URL:
https://y8w2f1.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Fake Instagram signup page on an unrelated vercel.app subdomain collecting usernames and passwords with DevTools blocked — credential phishing impersonating Instagram; do not enter credentials.

Risk Factors (5)
Brand impersonation: Instagram branding on a domain Instagram does not own (vercel.app subdomain)
Credential-harvesting form (password field) on an unrelated free-hosting subdomain of unknown creation date
Anti-analysis JavaScript blocking DevTools and view-source
Unranked rephost with no legitimate business legitimacy signals for an Instagram-shaped login page
Page text makes unverifiable data-handling assurances while collecting account credentials
Domain age information unavailable

Details

Page Title

Instagram

Scan Type

public

Domain Name Analysis

You're looking at domain 'y8w2f1.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'y8w2f1'. Its registrable label 'vercel' stretches across 6 characters split between 2 vowels and 4 consonants. Word splitting yields 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Cadastre-se para ver fotos e jeos dos seus amigos. Nome de usuario Nome completo Senha Data de nascimento mm/dd/yyyy 0 ‘As pessoas que sam nosso servico podem ter carregado suas informacdes de c...

Page Load Overview

0.75s
Total Load Time
380 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:622 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
564.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
164.239.109.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
164.239.123.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
139--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ED0309773E422535E62BC4A9A37F3642B1749187D902E060F59C42E82FD0EA173F9ED6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:81oMpSy60kXvNyQ7fr6Omotqc4kW5/2RvhLIG7kt:7QRk/NyEFmog7kW5ZVt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40972:opCNIPQQRO0A4OEAUyLglQBAKeAEQARITf2hhAhlYQTogWCglAQiYAWRCCUBAQkIEQSAA02JHUQhT0PoBYiTAcAiCKJEAisB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c383c3c3c0000
Perceptual Hash:8ed331ce4c31ce66
Difference Hash:196969a1a1690931
Wavelet Hash:013d3d3d3d3d0d19
Color Hash:38c00000040

Other Hashes

Crop Resistant:196969a1a1690931

Scan History

Scan history not available

Unable to load historical scan data