ScanMalware.com

Security Scan Report: paypal3.vercel.app

Submitted: Sep 3, 2026, 4:50:45 AMCompleted: Sep 3, 2026, 4:54:56 AMpubliccompleted

Summary

This website contacted 6 IPs in 1 country across 4 domains to perform 2 HTTP transactions. The main domain is paypal3.vercel.app and was registered 21 years ago.

Submitted URL: https://paypal3.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

The page impersonates PayPal, harvests credentials, and triggers a critical phishing IDS alert – treat as confirmed phishing scam.

Risk Factors
Unranked domain on free hosting platform
Brand impersonation of a major financial service
Presence of a login form collecting credentials
Critical network IDS phishing alert
Domain age information unavailable

Details

Page Title

PayPal Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

finance banking

(50%)

Domain Information

Within the application-focused generic top-level domain (.app), 'paypal3.vercel.app' is registered; it also runs on subdomain 'paypal3'. The registrable portion 'vercel' spans 6 characters with two vowels and four consonants. Word splitting yields two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://paypal3.vercel.app/

Page Load Overview

5.80s
Total Load Time
7
HTTP Requests
4
Domains
96 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:86 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking50% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
50%
e-commerce shopping
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.131United States
AS16509Amazon.com, Inc.
1104.17.208.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
164.29.17.195United States
AS16509Amazon.com, Inc.
1216.198.79.195United States
AS16509Amazon.com, Inc.
76--

Page Statistics

7
Requests
4
Unique Domains
101.0 KB
Total Size

Detected Technologies2

Vercel
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D161248611E70891A913D4B43BE797123668C013994ACCA83E7C968CDFAAFC7457339D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBrSi/tz8Yr8QC/RyFynOlOEQj1yN5+H6JxBZ7Z/xit3Bhxab+JRoT:TBrp/k5yFy4QjANvxUCui

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3372:AAAIAigEAAQQA8EgEAAAACABQIQBCEAABAAAAABAIAIAAwQhkEgCAQSEEgiKkEAEoQAIMEYEQAEABARQCAAIIEaQQQAAAAFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7ffe7e7ffff
Perceptual Hash:b38ccc3399cc6633
Difference Hash:001028284c4c3008
Wavelet Hash:cfcfc3c3c0c0f0f0
Color Hash:#d2a32d

Other Hashes

Crop Resistant:001028284c4c3008

Scan History

Scan history not available

Unable to load historical scan data