Security Scan Report: playdownnloadseguros.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 27 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://playdownnloadseguros.vercel.app/

AI Security Verdict

High Risk

Confidence: 76%

7
Risk Score

Clone of a Google Play listing for a Shopee app, hosted on an unrelated vercel.app subdomain with a 'safe play download' style hostname. No forms or malware were found, but the Google Play/Shopee impersonation and deceptive naming make it untrustworthy — do not download or install anything from it.

Risk Factors (5)
Impersonation of Google Play's store interface and of the Shopee brand on a non-official domain
Deceptive hostname crafted to resemble a 'safe play download' portal
Hosted on a free vercel.app tenant subdomain with unknown creation date and no domain reputation
Clone content derived from a real Google Play listing, with mixed-language fragments and placeholder support email
Network IDS recorded the host being used with an actor-abused cloud hosting service (informational context, not a standalone phishing/malware detection)
Domain age information unavailable

Details

Page Title

Shopee Coleta – Apps no Google Play

Scan Type

public

Domain Name Analysis

Domain 'playdownnloadseguros.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'playdownnloadseguros'. Count 6 characters in 'vercel' holding 2 vowels versus four consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://playdownnloadseguros.vercel.app/

Page Load Overview

0.99s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:3,207 chars
Detector Agreement:60%

Website Classification

Primary Category

technology software97% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
97%
e-commerce shopping
96%
entertainment media
96%
government public service
94%
education learning
92%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
764.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4142.251.110.119Google · CDNUnited States
AS15169Google LLC
4104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
276--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A215E9DB9630703FF83395BAA1C0AD49F28549C5F6170A76BD71E62742EE6B61362330

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Pqo6/8+Vqo6/8+xqo6/8+8q3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+Ajm:9jTuACnWkDNMDil3ezX7S03mt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:926786:/qlIJX/jIOEB2qIieQJCkAB0SEKUgIg0JFAQiiAAZqymAwqwAqEMjA1AkDRggqpAEiMRRAIMJ/xSAc/eQkBCA5RETFAGjSAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff9dfd8f87878fcf
Perceptual Hash:bfc8c03fa4c536c1
Difference Hash:303b633a3b3a1c2c
Wavelet Hash:7e9d998383838787
Color Hash:#b7bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data