Security Scan Report: clon-mercado-libre-chi.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 5 domains to perform 38 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://clon-mercado-libre-chi.vercel.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Counterfeit Mercado Libre clone hosted on a Vercel subdomain (name literally 'clon-mercado-libre'), matching a primary-domain phishing indicator. No credential fields parsed, but branding and intent are clear impersonation.

Risk Factors (5)
Impersonation of Mercado Libre's brand, logo and layout on a domaine that is not mercadolibre.com
Domain name explicitly self-identifies as a 'clone' of the impersonated brand
Single-source phishing threat-intel match on the primary domain
Free/shared Vercel hosting subdomain with unknown creation date used to mimic a major e-commerce brand
Login/account entry link ('Ingresá', 'Creá tu cuenta') presented within a counterfeit storefront
Domain age information unavailable

Details

Page Title

Mercado libre

Scan Type

public

Domain Name Analysis

Domain 'clon-mercado-libre-chi.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'clon-mercado-libre-chi'. Count 6 characters in 'vercel' with two vowels and four consonants. Tokenizing the label suggests two words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

mercado an =— libre Buscar productos, marcas y mds... | Q “Diep STARE siewunes Enviar a Copital Federal Categorias v Ofertas Historial Supermercada Moda Vender Ayuda Credtu cuenta Ingress Miscompras Y...

Page Load Overview

5.17s
Total Load Time
771 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,700 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

e-commerce55% confidence
Type: static
Method: ml+structural

All Detected Categories

e-commerce
55%
suspicious phishing
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1064.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.217.208.95Google · CDNUnited States
AS15169Google LLC
4184.24.77.177Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
464.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4184.24.77.174Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
388--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T123327433568990377B3745CEAE226769F1F7912EC5338C4A97BC89C8A7C5D90ED0344A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TmL1ee01+A4VTMjse20UgEnRGeZRQZqyMyQduCVyQqpoSYtQONrAYCCX5GSZ5Ktx:SkwlTMSHRNcD/nDhY7nI/Evyxw2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11530:aA0gymBnQJJISSAVBCAGjMXQCQwRgkSBoMAQkOMRyAwgETOAsIAIREw/Ei9/J+AGEAKMFAWAy9CecBTBjuIkg5BIOglBDBmv

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f9818581ffc381ff
Perceptual Hash:fa7ac5c5c7299091
Difference Hash:63093929651313c0
Wavelet Hash:b9808081ffd381ff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data