Security Scan Report: atendimento-protocolo.vercel.app

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 8 domains to perform 29 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://atendimento-protocolo.vercel.app/chat/index.html?placement=Instagram_Feed&utm_source=FB&utm_campaign=P30-N08-A3-R27%252Frocha+%25E2%2580%2594+C%25C3%25B3pia%257C120243441844030526&utm_medium=CJ%257C120243441844120526&utm_content=AN+%25E2%2580%2594%257C120243441844360526&utm_term=Instagram_Feed&utm_id=120243441844030526&fbclid=PAb21jcAQX8Y1leHRuA2FlbQEwAGFkaWQBqzDF93OfnnNydGMGYXBwX2lkDzU2NzA2NzM0MzM1MjQyNwABp55909ef0uBGILa4eUl8d20jqzoRF-sQLaTPDlJ9sNoFw50cJoikzlclOIVf_aem_1Apmj7_fmCW9ShUo57af1A&fbclid=PAZXh0bgNhZW0BMABhZGlkAaswxfdzn55zcnRjBmFwcF9pZA81NjcwNjczNDMzNTI0MjcAAaeefdPXn9LgRiC2uHlJfHdtI6s6ERfrEC2kzw5SfbDaBcOdHCaIpM5XJTiFXw_aem_1Apmj7_fmCW9ShUo57af1A&twrclid=69ab11e9716dff6ab70832b2&cpf=08517111702

AI Security Verdict

Moderate Risk

Confidence: 66%

5
Risk Score

Anonymous 'customer service' chat funnel on a free vercel.app subdomain, carrying a CPF and Facebook ad-tracking parameters, with cloaking IP lookups and anti-analysis JS. No forms found; avoid submitting any data.

Risk Factors (5)
Deceptive fake customer-service framing on an anonymous shared-hosting subdomain
Personal identifier (CPF) passed in the URL query string together with ad-click tracking
Anti-analysis: right-click/context menu blocked and encoding/decoding routines in inline scripts
External IP-lookup calls consistent with cloaking/visitor filtering
Page has no legitimate substantive content — no company name, policy, address or verifiable identity
Safety Factors (5)
Verified form facts: 0 forms, 0 password fields, 0 disguised password fields, 0 payment fields — no credential or payment harvesting detected on this page
No Indicators of Compromise matched against the page or its loaded resources
No JavaScript malware (hunting rule) patterns and no known-kit roster match
No cross-origin credential exfiltration observed
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Atendimento • Central

Scan Type

public

Domain Name Analysis

You're looking at domain 'atendimento-protocolo.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'atendimento-protocolo'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus 4 consonants. It segments into 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Eee Dúvidas? fale conosco! @ Costuma responder em até 2 minutos Este atendimento está indisponível.

Page Load Overview

3.45s
Total Load Time
909 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:140 chars
Detector Agreement:81%

All Detected Languages

🇵🇹pt(83%)🇮🇹it(17%)

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.26.10.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
864.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.68.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2195.154.239.25Paris, Île-de-France, France
AS12876Scaleway SAS
264.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.26.11.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2912--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14852C92A18E330B1577384452EA361122568900FF8B7EEBC758CC6317FDAC5A49E3ADD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:jRFbE3AvFdFbZwbE3AvFd/zwQLOuHhqa6DUciybdzhyfXodtn/rnLYd7yuzfmbhu:jRDrteFwwqHEEncd77e3JAspXcjv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13228:mAER0LU5sXLFwCAYEAKMGQAJiLRYCZQwKgZSSg8MLUCRSAXgRgXHIhECUVRECwDQknaF5gIEFDBDgpBLMyLki4FBIAAFmBsS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02e7e6fefefefeff
Perceptual Hash:f773335188cc8ccc
Difference Hash:8e4c0c0000000000
Wavelet Hash:00e600ee0e0e0e0e
Color Hash:07000080003

Other Hashes

Crop Resistant:8e4c0c0000000000

Scan History

Scan history not available

Unable to load historical scan data