Security Scan Report: fiashapp-three.vercel.app

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 4 domains to perform 9 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://fiashapp-three.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake 'Flash' login on a look-alike vercel.app subdomain collecting CPF and password via an odd /api/evento endpoint. Never enter credentials; report it.

Risk Factors (5)
Impersonation of the 'Flash' brand (incl. its legal entity, CNPJ and support phone) on a non-official domain
Credential harvesting form (CPF + password) on a shared hosting-platform subdomain
Typosquatted subdomain name 'fiashapp' mimicking 'flash'
Form posts to a non-standard '/api/evento' endpoint rather than a documented authentication API
Unknown-age subdomain on a free host; unranked domain with no legitimate reputation
Domain age information unavailable

Details

Page Title

Acesse sua conta da Flash - Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'fiashapp-three.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'fiashapp-three'. Count 6 characters in 'vercel' with two vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fiashapp-three.vercel.app/

Page Load Overview

0.42s
Total Load Time
362 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:514 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1185.111.111.158Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1104.21.89.136Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1172.67.159.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
97--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14B5295A62EBB053D6803C6697BEB63166365D007D60AC8587F9C03688F866C4DC7B7CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:jr7l0EraZ5aVLycsOeE+Mp2729JS534UFk8UpYPKvHadsKDIKyIy0:jr71aZ5lDPkHMsqIKy0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14374:dKYSiAAAASCQCDFCCwIsBEQTKcChURFACxAkQBQwEIcMlZIATHyCCiZIAksKHYEgkEKgLDRpAchMNwAICiNA4CHiBhZEWAiI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffd1d1f1e1fffffb
Perceptual Hash:ed6d929292969669
Difference Hash:2033234703300232
Wavelet Hash:9f8181f1c1cfff00
Color Hash:#c3c587

Scan History

Scan history not available

Unable to load historical scan data