Security Scan Report: demo-tailwind-sooty.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://demo-tailwind-sooty.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed phishing: a vercel.app subdomain clones the Facebook login page and captures email/password; Safe Browsing flags it for social engineering. Never enter credentials.

Risk Factors (5)
Facebook brand impersonation on an unrelated vercel.app subdomain
Credential-harvesting login form (password + email/username) on non-Facebook domain
Google Safe Browsing Social Engineering detection
Unknown-age shared-hosting tenant subdomain used to host a lookalike brand login page
Suricata alerts for vercel.app abused as cloud hosting service (contextual, not standalone)
Domain age information unavailable

Details

Page Title

Facebook – log in or sign up

Scan Type

public

Domain Name Analysis

Domain 'demo-tailwind-sooty.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'demo-tailwind-sooty'. The second-level label 'vercel' is 6 characters long holding 2 vowels versus four consonants. It segments into two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://demo-tailwind-sooty.vercel.app/

Page Load Overview

0.35s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:227 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network98% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
98%
entertainment media
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
064.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
34--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15D91C75593E301FE454747AA021029D2B1CCC617CBE6E34CB6EE63611F83CF18DAA979

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nH/h26T5ATcxAfAPxbt6n8MnrFQiEC2wM64cdImBl5cDiLgVgQDugTpracOkPwGr:nf869HW6xBurarrGI62iMVLNTRCj42cN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4447:RJAiABMFBACCEQIwYAJAAJSCAAYJCAiIIQ0QkCIJAAkAgiEAAAAAGCkUoOAIKkIABAgEIEGAAYghQQAgCAgABAEEQACFgAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff8787e7ffff
Perceptual Hash:b6c9c9263ec9c12e
Difference Hash:0008522c2c4c1008
Wavelet Hash:f0f0f88080e0f0f0
Color Hash:#79d2a9

Other Hashes

Crop Resistant:0008522c2c4c1008

Scan History

Scan history not available

Unable to load historical scan data