Security Scan Report: g1globoagora.vercel.app

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 9 domains to perform 21 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://g1globoagora.vercel.app/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Fake G1 news page on a vercel.app subdomain impersonating Globo/G1 to funnel users into a credit-offer lead scam. No credential forms, but clear brand impersonation of a major media brand.

Risk Factors (5)
Brand impersonation of G1/Globo on a non-official vercel.app subdomain
No credential or payment forms detected, so not a pure phishing page, but a deceptive brand-funnelled financial offer
Unranked/unknown-age hosting-platform subdomain used to borrow a major media brand's authority
Clickbait credit offer ('alternativa de crédito de até R$ 20.000') targeting users with CPF restrictions
Third-party lead-tracking scripts (utmify) on a page masquerading as journalism
Domain age information unavailable

Details

Page Title

G1

Scan Type

public

Domain Name Analysis

You're looking at domain 'g1globoagora.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'g1globoagora'. The second-level label 'vercel' is 6 characters long split between 2 vowels and four consonants. Tokenizing the label suggests 2 words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://g1globoagora.vercel.app/

Page Load Overview

0.76s
Total Load Time
668 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:948 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
78%
entertainment media
69%
corporate business
54%
government public service
48%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.68.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1186.192.91.5Brazil
AS28604Globo Comunicacao e Participacoes SA
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.10.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2111--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T190B2504B6AF31026691361792FFBA3053671C007D94ECE693FDC5298CF86AA95C2378D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Wvr0kbUjYWk2YX7RDkoBkYck5T6PK6RdvD/QtQSH5sv9ca4QROPXA39A73ZfZQZ+:Wvr0YU09WRvDMq7ju9cK2u6nkDdWT6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23696:CwhAgSWEiBBkQQIXDT8BEFQiNgkCgADAwYxxLExJUgAOShJ0RwkhKiZkj0IRUgFYAZUYzEA0ghYWgABDCB0lgIAUKEt2AiyI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffcf878787ff
Perceptual Hash:b84d473641364f4f
Difference Hash:9d3a221c1c3d2d98
Wavelet Hash:0083fb87878787cf
Color Hash:#d22d88

Scan History

Scan history not available

Unable to load historical scan data