Security Scan Report: sc-paypal.vercel.app

Redirected to:
https://sc-paypal.vercel.app/signin
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 2 domains to perform 19 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://sc-paypal.vercel.app/

Effective URL:
https://sc-paypal.vercel.app/signin
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake PayPal sign-in cloned on a Vercel subdomain (sc-paypal.vercel.app) to harvest email/mobile + password. Brand impersonation plus a credential form; never enter credentials here.

Risk Factors (5)
Brand impersonation of PayPal on a non-PayPal domain (sc-paypal.vercel.app)
Credential-harvesting login form (email/mobile + password) cloned from PayPal's sign-in page
Hosted on an instant-publish shared platform subdomain of unknown creation date
Network IDS alerts for actor-abused cloud hosting service (vercel.app)
Unranked domain claiming to be a major financial brand
Domain age information unavailable

Details

Page Title

Log in to your PayPal account

Scan Type

public

Domain Name Analysis

The domain 'sc-paypal.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'sc-paypal'. The core label 'vercel' covers 6 characters containing 2 vowels alongside four consonants. Tokenizing the label suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://sc-paypal.vercel.app/

Page Load Overview

2.05s
Total Load Time
267 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:180 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping56% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping
56%
finance banking
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.17.207.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
364.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.17.208.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
195--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10FB1A3B4BC429FA721138EE9B129F71D6089D72FE9A3D898F3ECC1A907C5E648D04940

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nTTC4G14G12eqnjMqeTR+0FOVCISYcpNUYjz+eSwH06RHbH0R2Rh7t7tw9f5ktou:nTrw4w9qT3ckM6wdhTBG9qM1Pu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5132:hAQGQAyqRSmISACNAhAAhIC5CSAAJEoYAGCgCiAAMgAAAIiAYAwAAgAEVBAA0ABCjGAZAgAgAhgRCMAYFItyANFAGBQgQAgB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7efe7e7ffff00
Perceptual Hash:b399cce622999966
Difference Hash:000c080c4d0c080c
Wavelet Hash:ffc3c3c3c3c3c300
Color Hash:#c7e06c

Other Hashes

Crop Resistant:000c080c4d0c080c

Scan History

Scan history not available

Unable to load historical scan data