Security Scan: Facebook

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3fce964d-837b-49c1-b293-61850d8f3268 Domain and IP registration (RDAP)/api/v1/rdap/3fce964d-837b-49c1-b293-61850d8f3268 Certificate Transparency/api/v1/ct/levoretsv.vercel.app How often this domain was scanned/api/v1/domain/stats/levoretsv.vercel.app Scan history for this domain/api/v1/domain/history/levoretsv.vercel.app?limit=15

This website contacted 6 IPs in 3 countries across 2 domains to perform 12 HTTP transactions. The main domain is levoretsv.vercel.app and was registered 4 years 8 months ago.

Submitted URL: https://levoretsv.vercel.app/

Effective URL:

https://levoretsv.vercel.app/index.html?lang=de

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed Facebook credential-phishing page on a vercel.app subdomain: fake login-alert lure plus forms capturing current password, new password and 2FA codes, with IP-geolocation scripts. Report and do not enter any data.

Risk Factors (5)

Facebook brand impersonation on a non-official domain (levoretsv.vercel.app)

Credential-capture flow collecting current password, new password and 2FA/confirmation codes

Urgent account-compromise scare language ('Om det inte var du...' / 'Jemand hat sich gerade in dein Facebook-Konto eingeloggt')

IP-geolocation lookups (ipwho.is, api.ipapi.is, ipapi.co) used to fabricate a location-based login alert

Subdomain on a shared hosting platform where creation date is unknown and cannot be trusted

Domain age information unavailable

Details

Page Title

Facebook

Scan Type

public

Domain Name Analysis

You're looking at domain 'levoretsv.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'levoretsv'. The second-level label 'vercel' is 6 characters long with 2 vowels and four consonants. Breaking it apart gives two words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.33s

Total Load Time

27 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,735 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

social media network99% confidence

Type: static

Method: ml+structural

All Detected Categories

social media network

99%

technology software

83%

blog personal website

77%

education learning

72%

news media journalism

71%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.20.44.133Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	167.233.217.29	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
2	188.68.242.180	Olsztyn, Warmia-Masuria, Poland	AS197226sprint S.A.
2	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	172.66.175.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	6	-	-