ScanMalware.com

Security Scan Report: sardineext.vercel.app

Redirected to:
https://sardineext.vercel.app/user/index_facebook.html
Submitted: Aug 29, 2026, 12:45:25 AMCompleted: Aug 29, 2026, 12:47:46 AMpubliccompleted

Summary

This website contacted 4 IPs in 1 country across 3 domains to perform 1 HTTP transaction. The main domain is sardineext.vercel.app and was registered 23 years ago.

Submitted URL: http://sardineext.vercel.app/user/index_facebook.html

Effective URL: https://sardineext.vercel.app/user/index_facebook.htmlRedirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Page impersonates Facebook and harvests login credentials; treat as confirmed phishing scam.

Risk Factors
Brand impersonation of Facebook on an unranked subdomain
Credential collection form (email/phone + password) on a non‑official domain
Hosting on a shared platform (vercel.app) with unknown subdomain creation date
Domain age information unavailable

Details

Page Title

Facebook Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(99%)

Domain Information

You're looking at domain 'sardineext.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'sardineext'. Its registrable label 'vercel' stretches across 6 characters split between 2 vowels and 4 consonants. Segmentation suggests 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of ipapi.co

Page Load Overview

1.07s
Total Load Time
7
HTTP Requests
3
Domains
434 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:80 chars
Detector Agreement:50%

Website Classification

Primary Category

social media network99% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
99%
news media journalism
46%
social media
15%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4185.15.59.240United States
AS14907Wikimedia Foundation Inc.
1216.198.79.131United States
AS16509Amazon.com, Inc.
164.29.17.131United States
AS16509Amazon.com, Inc.
1104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
74--

Page Statistics

7
Requests
3
Unique Domains
439.5 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A481438F9AAB04537993907837B696563765C813C20EDE383E9CB38CCF857E1496635C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Tb4KfHqjAdja91CygWN25DtuJRGLvCqXYIu:YKfqjAdjs8ANSBuJRGrzo3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4019:AcECJAAAAIABiTQIAACACKCIAgAAACCAgCIQaRRBAAKWhRUYAQiCAAIJAAEgAhjICAKKCEDDgALAAUABABAAAHJgSAIgAwBB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:071f1f27271f7f7f
Perceptual Hash:a2339ccc6733998d
Difference Hash:4ab1b24daab3a5aa
Wavelet Hash:030b1f07071f1f3f
Color Hash:#821f93

Other Hashes

Crop Resistant:4ab1b24daab3a5aa

Scan History

Scan history not available

Unable to load historical scan data