Security Scan: Official Notice from Facebook

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/596bd318-11f5-4f5a-9fd7-8dc955768693 Domain and IP registration (RDAP)/api/v1/rdap/596bd318-11f5-4f5a-9fd7-8dc955768693How often this domain was scanned/api/v1/domain/stats/metacas-i2a9.vercel.app Scan history for this domain/api/v1/domain/history/metacas-i2a9.vercel.app?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 25 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://metacas-i2a9.vercel.app/meta

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake Meta/Facebook 'verified badge 2026' notice hosted on a free vercel.app subdomain, with obfuscated IP-lookup scripting and a reCAPTCHA gate. Brand impersonation confirmed; treat as a phishing lure even though no credential form was captured.

Risk Factors (5)

Impersonation of Meta/Facebook official notices on a non-Meta, unranked vercel.app subdomain

Fake 'verified badge / Creator Verify 2026' notification used as a bait lure

Obfuscated script contacting an external IP-lookup service (api.ipify.org) hidden from plain view

Network IDS alerts including an abused-cloud-hosting classification for vercel.app in TLS SNI

Noindex not set and no legitimate site ownership disclosure; title/meta are copied brand strings

Domain age information unavailable

Details

Page Title

Official Notice from Facebook

Scan Type

public

Favicon Hash

MMH3: 1524548751

MD5: fcb811cb5bccc7747ec3362de38756d5

Domain Name Analysis

You're looking at domain 'metacas-i2a9.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'metacas-i2a9'. Count 6 characters in 'vercel' split between 2 vowels and four consonants. Word splitting yields two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Meta reCAPTCHA Ich bin kein Roboter Dies hilft uns, schadliches Verhalten zu bekampfen, Spam zu erkennen und zu verhindern und die Integritét unserer Produkte zu wahren. Wir haben das Google reCAP...

Page Load Overview

1.57s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:96%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:747 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as de

All Detected Languages

🇩🇪de(96%)🇺🇸en(4%)

Website Classification

Primary Category

technology software85% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

85%

documentation technical

74%

social media network

72%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
25	4	-	-