Security Scan Report: superfimdeano.vercel.app

Submitted: Completed: publiccompleted
This website contacted 46 IPs in 4 countries across 19 domains to perform 782 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://superfimdeano.vercel.app/

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Unranked, unknown-age vercel.app page selling 'Viva Sorte' lottery titles with fake win-confirmation screens, PIX charges, CPF/phone capture and aggressive upsells - avoid paying or submitting personal data.

Risk Factors (6)
Unknown-age tenant on a shared free-hosting platform (.vercel.app) - creation could be days old
Brand name displayed does not match the hosting subdomain ('superfimdeano' vs 'Viva Sorte')
Simulated prize-confirmation and instant-win screens used to drive further payments/upsells
Collection of CPF and telephone number combined with PIX payment requests on a low-reputation domain
IDS alerts for OTP values transmitted in cleartext and frequent external IP-lookup calls
Circular redirect observed in the redirect chain
Safety Factors (5)
No password, disguised-password or card/CVV fields present (verified form facts: 0 forms, 0 payment fields)
No JavaScript malware (YARA), no known-kit roster hit, and no threat-intelligence matches on page or resources
Page cites a Brazilian CNPJ (48.098.937/0001-78) and states draws are backed by Títulos de Capitalização, with a charity reference
No brand-name credential harvesting or cross-origin credential exfiltration detected
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Sorte

Scan Type

public

Domain Name Analysis

The domain 'superfimdeano.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'superfimdeano'. Its registrable label 'vercel' stretches across 6 characters containing two vowels alongside four consonants. Breaking it apart gives 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://superfimdeano.vercel.app/

Page Load Overview

3.55s
Total Load Time
25.0 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:4,481 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking75% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
75%
healthcare medical
71%
government public service
67%
news media journalism
65%
corporate business
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1764.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
17216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
17172.217.208.95Google · CDNUnited States
AS15169Google LLC
17195.154.239.26Paris, Île-de-France, France
AS12876Scaleway SAS
17172.67.68.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
17142.250.154.94Google · CDNUnited States
AS15169Google LLC
17142.251.110.100Google · CDNUnited States
AS15169Google LLC
1723.50.131.156Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
17157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
78246--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115D3FB1779F330623573A0A13BA3276B3829D007E927DDB87A4D53605FC9D9588E3A9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:PEBUf9IKPFFVlKVgi7iftStaehFsnY/sUf2hhFgnHMmXrRlw:3FVlKVgi7iftSaasKK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:141365:i0KaA1AE4RQAHS41YGFkgAAqIiaJJtuAAWACMYQFiGQgAdLSCKoo2DJwIARUwm0ImiBCUACMIYYNNgfgCOJIVA5cauCCyAAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000c3ffffffff
Perceptual Hash:e40f56a5d3a552a5
Difference Hash:f471a5170c868e8c
Wavelet Hash:00000000ffffffff
Color Hash:#5b3a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data