ScanMalware.com

Security Scan Report: tf-app.vercel.app

Redirected to:
https://tf-app.vercel.app/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/65121042-e285-4b30-b0ac-ee132065b0f1Domain and IP registration (RDAP)/api/v1/rdap/65121042-e285-4b30-b0ac-ee132065b0f1How often this domain was scanned/api/v1/domain/stats/tf-app.vercel.appScan history for this domain/api/v1/domain/history/tf-app.vercel.app?limit=15
This website contacted 9 IPs in 1 country across 4 domains to perform 15 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://tf-app.vercel.app

Effective URL:
https://tf-app.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing page impersonating Itaú's business banking portal on a Vercel subdomain, harvesting RUT and internet password; flagged by Safe Browsing for social engineering.

Risk Factors (6)
Bank-brand impersonation (Itaú) hosted on a free Vercel subdomain with no affiliation to the real bank
Credential capture form asking for RUT and internet password, styled as the bank's business portal
Google Safe Browsing social-engineering (phishing) detection
Threat-intel phishing report on the primary domain
IDS alerts for actor-abused cloud hosting service
Domain reputation unknown and unranked; subdomain creation date not attributable (could be minutes old)
Domain age information unavailable

Details

Page Title

Itaú

Scan Type

public

Domain Name Analysis

Domain 'tf-app.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'tf-app'. The core label 'vercel' covers 6 characters holding 2 vowels versus four consonants. Word splitting yields 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

zs 2 s 2 5 $ 2 g 5 2 a 8 £ 5 3 2 portal Itai Empresas Ingresa tu RUT usuario Ingresa tu clave internet ZOlvidaste tu clave? zAun no tienes tu clave? PUeiFApeavageaaenteeai ty) Empresa 600 6860...

Page Load Overview

0.98s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:237 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as es

All Detected Languages

🇪🇸es(67%)🇮🇹it(33%)

Website Classification

Primary Category

corporate business57% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
57%
finance banking
53%
healthcare medical
28%
government public service
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
664.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.67.139.119Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.26.223Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.151.120Google · CDNUnited States
AS15169Google LLC
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.157.120Google · CDNUnited States
AS15169Google LLC
159--

Detected Technologies3

PasswordField
100%
Font Awesome
40%
Firebase
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A6A30E065F48019BB05A4C7F7881BF7466F2EB195AD14895E1366D807EF38AE318FB32

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:seUO6kCtRrM1MvMaMfMRQdm0grfT/QypZhzZHp6jA691AW:/YIlgrLXzZJo191T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:102314:ATAbyVNAoSpUABOCcRQDIiTQKJZglMGF9IynALTEGdgiYYgIXoCoOEBqSHQFJNJEwfhyaSAIaCBwFoKnSEIVuiGlBOMpB0QJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3b3f3f7f19180000
Perceptual Hash:8d86674de397d822
Difference Hash:e3e7b2f2b372724a
Wavelet Hash:3f3f7f7f19180800
Color Hash:03c00000000

Other Hashes

Crop Resistant:83c5c562e6676564,e3e7b2f2b372724a,2527072d6d199b96

Scan History

Scan history not available

Unable to load historical scan data