Security Scan Report: leilaoaovivocompleto.vercel.app

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 7 domains to perform 26 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://leilaoaovivocompleto.vercel.app/product-iphone-16.html?utm_source=organic&utm_campaign=&utm_medium=&utm_content=&utm_term=

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake auction site on a vercel.app subdomain impersonating Casas Bahia, using the retailer's name and CNPJ to collect email/phone data for a bogus iPhone 16 bidding funnel.

Risk Factors (4)
Impersonation of Casas Bahia brand on a non-official domain
Collects personal contact data (email, phone) under false brand authority
Auction/lead-capture funnel on an unranked shared-hosting subdomain
Cloud hosting platform flagged by IDS as commonly abused by threat actors
Domain age information unavailable

Details

Page Title

iPhone 16 128GB Preto | Arremata+

Scan Type

public

Domain Name Analysis

The domain name 'leilaoaovivocompleto.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'leilaoaovivocompleto'. Its registrable label 'vercel' stretches across 6 characters containing 2 vowels alongside four consonants. Breaking it apart gives two words: ver, cel. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://leilaoaovivocompleto.vercel.app/product-iphone-16.html?utm_source=organic&utm_campaign=&utm_medium=&utm_content=&utm_term=

Page Load Overview

2.90s
Total Load Time
411 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:2,866 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical72% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
72%
government public service
44%
cryptocurrency blockchain
44%
entertainment media
39%
finance banking
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
864.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.26.11.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3172.67.68.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.127.94Google · CDNUnited States
AS15169Google LLC
3172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
267--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T114C2B620D3FC193EE212018AE361777D305BA14BDACE1524757D0976EF91E8AE837A9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:PQv1Qa1lOqUKFF3e4mnQPRlkPeoYOF1HEgybAqtw:ovWaaqnFO4mnQ5lkPl4g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27526:kCEYC2DQAFGBiAaMgACZEhI1O0ITLAegAgx8CRrIgnUKNQADANAHlEQEAUEwCCQCcIKwNJEJESBKMBbCsAmiCxFMGAtFOmE0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:80ffdf9f819fffff
Perceptual Hash:bc66c37c7c436063
Difference Hash:23343a3c3333493c
Wavelet Hash:0097968e8097bdef
Color Hash:#bf9540

Scan History

Scan history not available

Unable to load historical scan data