Security Scan Report: americanas-rho.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 4 countries across 11 domains to perform 25 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://americanas-rho.vercel.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Vercel subdomain masquerading as the Brazilian retailer Americanas, reproducing its name, CNPJ address and CDN images; also flagged for phishing. No forms on this page, but treat as an impersonation landing page.

Risk Factors (5)
Impersonation of a different entity's brand (Americanas) on a non-official domain
Single-source threat-intel phishing report on the primary domain
IDS alerts for actor-abused cloud hosting namespace
Hotlinking of the legitimate brand's image CDN assets
Unranked domain on an instant-publish hosting platform with unknown true age
Domain age information unavailable

Details

Page Title

Americanas

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'americanas-rho.vercel.app' is registered; it also runs on subdomain 'americanas-rho'. The second-level label 'vercel' is 6 characters long containing two vowels alongside 4 consonants. It segments into 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

a oferta corre que é por <* de Natal tempo limitado os mais vendidos os mais vendidos de todos!

Page Load Overview

5.20s
Total Load Time
864 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:318 chars
Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain57% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
57%
adult content
37%
corporate business
36%
government public service
34%
finance banking
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.13.97Google · CDNUnited States
AS15169Google LLC
118.66.102.51Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
118.244.18.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1216.239.32.36Google · CDNUnited States
AS15169Google LLC
123.50.131.157Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1186.209.113.142Brazil
AS53107EVEO S.A.
1157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2515--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T122E20944527060B44E3F838E671FAE187079289AACA78DA9B5EB71183FC4DE8374775C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:bymumXmHmzrmgm8mdwoC9aI6Wq5DzpqVwn4DlCiscvL5iA+b6d:bymumXmHmzrmgm8mdwoLI6Wq5DzYVEIJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33234:QyArlEGBaTEkDOBqBAphGRwEDDBJkCAhNCIC0IgMFBHA7QMRIwoekBUpCoYhggBBxCKQapGYAIZAWgODIvNijDsIfEwU0joZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00007f187fffffff
Perceptual Hash:8e5f71701e0ec3e1
Difference Hash:619ae371b5cae1c1
Wavelet Hash:0000391019ffffff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data