Security Report: www.facebook-sage-tau.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1f5bb7d6-d13f-421e-b8e3-f3646e81edf7 Domain and IP registration (RDAP)/api/v1/rdap/1f5bb7d6-d13f-421e-b8e3-f3646e81edf7How often this domain was scanned/api/v1/domain/stats/facebook-sage-tau.vercel.app Scan history for this domain/api/v1/domain/history/facebook-sage-tau.vercel.app?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 6 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.facebook-sage-tau.vercel.app/

Effective URL:

https://facebook-sage-tau.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Facebook login on a Vercel subdomain impersonating Meta, harvesting email/password and exfiltrating via a hidden Telegram bot token — confirmed credential phishing.

Risk Factors (6)

Brand impersonation of Facebook/Meta on a domain that is not Meta's official domain

Credential-capturing login form (password + email) under an impersonated brand

Google Safe Browsing Social Engineering threat + OpenPhish phishing reports

Telegram bot token embedded in an inline script (exfiltration channel)

Obfuscated script hiding an ipapi.co network sink and threat-feed host

Subdomain on free hosting platform with unknown creation date, unranked in Cisco Umbrella

Domain age information unavailable

Details

Page Title

Facebook - Log In

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.facebook-sage-tau.vercel.app' is registered; it also runs on subdomain 'www.facebook-sage-tau'. Count 6 characters in 'vercel' split between two vowels and four consonants. Splitting it apart reveals 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.55s

Total Load Time

9 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:76 chars

Detector Agreement:50%

Website Classification

Primary Category

social media network99% confidence

Type: webapp

Method: ml+structural

All Detected Categories

social media network

99%

news media journalism

32%

adult content

29%

phishing scam

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
6	3	-	-