Security Scan Report: meli-frontend-challenge-one.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 14 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://meli-frontend-challenge-one.vercel.app/

AI Security Verdict

Moderate Risk

Confidence: 68%

4
Risk Score

Mercado Libre-branded demo/clone on a vercel.app subdomain. No forms, no credential harvesting, no Indicators of Compromise or malware, so not phishing — but it mimics another company's brand on a non-official domain, so treat as brand imitation, not an official Mercado Libre site.

Risk Factors (2)
Impersonation of a different entity's brand (Mercado Libre) on a domain that is not Mercado Libre's official domain
Hosted on a shared/instant-publish platform subdomain with unknown creation date, often abused for look-alike pages
Safety Factors (5)
No login, credential, or payment forms on the page
No Indicators of Compromise matched against the page or its resources
No JavaScript malware patterns or high-precision native YARA hits
No cross-origin credential exfiltration; all page scripts served from the site's own domain
Domain name suggests a developer 'frontend challenge' demo rather than an active phishing operation
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'meli-frontend-challenge-one.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'meli-frontend-challenge-one'. Count 6 characters in 'vercel' containing 2 vowels alongside four consonants. It segments into two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://meli-frontend-challenge-one.vercel.app/

Page Load Overview

1.69s
Total Load Time
212 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Text Length:160 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping39% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2208.109.29.18United States
AS398101GoDaddy.com, LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
22.16.206.28Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
22.21.20.153Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22.21.20.132Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
147--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1599154239C88497703230ACEE77DEB0D71C58A1FCA26250576FA979C0BE3E845E2BD14

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:gUs3qVq9AN/WYmfgoquReWaLj90UeQ3J6H38P+5:gB3qVqORgGeHv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4480:mgQAEKABApgAQKCAAEAQogiIEEBCJACEQAEEAAEBAQCESAgBQhQTJJgBCQoARDAEEkAABCEAIBQBACQAAyQgARAQASEIAERR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:cd4d4d4d4d4d4d4c
Difference Hash:720c000000000000
Wavelet Hash:00fffcfc00000000
Color Hash:#c59a87

Other Hashes

Crop Resistant:720c000000000000

Scan History

Scan history not available

Unable to load historical scan data