Security Report: leillabashia2026.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d6234082-fe94-4aa4-b87b-e8a5f77965a2 Domain and IP registration (RDAP)/api/v1/rdap/d6234082-fe94-4aa4-b87b-e8a5f77965a2How often this domain was scanned/api/v1/domain/stats/leillabashia2026.vercel.app Scan history for this domain/api/v1/domain/history/leillabashia2026.vercel.app?limit=15

This website contacted 10 IPs in 2 countries across 9 domains to perform 45 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://leillabashia2026.vercel.app/

AI Security Verdict

Moderate Risk

Confidence: 58%

Risk Score

Unranked vercel.app subdomain reusing Casas Bahia's name, address and CNPJ without being its official domain. No credential/payment forms and no malware or Indicators of Compromise, but brand impersonation warrants caution — do not submit personal data.

Risk Factors (5)

Brand impersonation of Casas Bahia (its name, address and CNPJ reused) on a domain that is not the brand's official domain

Unofficial free-hosting subdomain (vercel.app) with unknown creation date — cannot be validated as an official brand property

No verifiable business legitimacy: legitimacy score 8/100, unranked in Cisco Umbrella

Lead-capture forms collecting personal contact data (e-mail, phone, CEP) under a well-known retail brand's identity

Circular redirect detected on the submission endpoint

Safety Factors (5)

No password, credential or payment fields captured (0 payment fields, 0 password fields)

No Indicators of Compromise matched against the page or its resources

No JavaScript malware (YARA) patterns, no known phishing kit in the kit roster

No JavaScript credential exfiltration or cross-origin credential submissions detected

Forms post back to the same page; no off-site credential funnel

Domain age information unavailable

Details

Page Title

Arremata+ | Leilões online em todo o Brasil

Scan Type

public

Domain Name Analysis

The domain 'leillabashia2026.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'leillabashia2026'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.06s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:5,442 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain47% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

47%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	172.67.68.221Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.127.95Google · CDN	United States	AS15169Google LLC
4	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	104.26.10.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
4	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.26.11.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
45	10	-	-