Security Scan: Magalu

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6d1e55d4-2f0e-41db-91a6-25a9c6eac195 Domain and IP registration (RDAP)/api/v1/rdap/6d1e55d4-2f0e-41db-91a6-25a9c6eac195How often this domain was scanned/api/v1/domain/stats/msb-ml.vercel.app Scan history for this domain/api/v1/domain/history/msb-ml.vercel.app?limit=15

This website contacted 13 IPs in 2 countries across 8 domains to perform 17 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://msb-ml.vercel.app/meuspedidos

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Vercel subdomain posing as the Brazilian retailer Magalu, flagged as phishing by OpenPhish and soliciting a CPF under the guise of order tracking. Brand impersonation on a non-official host; avoid entering any personal data.

Risk Factors (5)

Brand impersonation of a different entity (Magalu) on a mismatched, unofficial hostname

Primary domain reported as phishing by OpenPhish threat intelligence

Collects a CPF (Brazilian taxpayer/identity number) under the pretext of order tracking

Hosted on a free .vercel.app subdomain with unknown creation date, unsuitable for a major retailer

IDS alerts flagging the hosting service as commonly abused by actors

Domain age information unavailable

Details

Page Title

Magalu

Scan Type

public

Domain Name Analysis

The domain 'msb-ml.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'msb-ml'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus 4 consonants. Splitting it apart reveals 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.68s

Total Load Time

447 KB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:1,121 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence

Type: dynamic

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	146.75.120.193Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
1	199.232.196.193Fastly · CDN	United States	AS54113Fastly, Inc.
1	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	13.216.146.61Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	34.143.76.2Google · CDN	United States	AS396982Google LLC
1	34.143.78.2Google · CDN	United States	AS396982Google LLC
1	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
17	13	-	-