Security Scan Report: www.mismates27272.vercel.app

Redirected to:
https://mismates27272.vercel.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 2 countries across 12 domains to perform 16 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.mismates27272.vercel.app/

Effective URL:
https://mismates27272.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Facebook login on a vercel.app subdomain uses a 'detected sexual content' pretext to harvest phone/email and password, sending them to an unrelated third-party PHP endpoint.

Risk Factors (6)
Brand impersonation of Facebook on a domain that is not facebook.com
Credential harvesting form submitting passwords to a third-party domain (marines.materiales.site/pasta.php)
Hidden password/hash field not visible to the user
Fear/lure pretext about detected 'sexual content' to force re-authentication
Free hosting-platform subdomain (vercel.app) with unknown creation date, unranked in Cisco Umbrella
IDS alerts for actor-abused cloud hosting and unknown tracking domains
Domain age information unavailable

Details

Page Title

Foottooos D1sscrettaass

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.mismates27272.vercel.app' is registered with subdomain 'www.mismates27272'. Its registrable label 'vercel' stretches across 6 characters holding two vowels versus 4 consonants. It segments into 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.mismates27272.vercel.app/

Page Load Overview

75.39s
Total Load Time
381 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:222 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network99% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
99%
adult content
98%
phishing scam
62%
documentation technical
33%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1664.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
064.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
064.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0192.178.183.97Google · CDNUnited States
AS15169Google LLC
0195.154.239.26Paris, Île-de-France, France
AS12876Scaleway SAS
0151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
0104.26.5.7Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.66.172.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.10.2Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1619--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15F525C5B9DC60443900394A463F7EB482D7AA507E10ACC6E3AEC33A4AFC1BE6459339C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:IDrneBtNNuMMFDAC0n3pYiPJeGUf2VE7cdhcIGO5tlR/enXJPc/6+Kkemh+cMhD:I3wtzMF9o0TBnpi6+KtHcOD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14498:UiAZwRAIqHAChIoAUyEAIUhMAAG2CiAObpdUIQ7ETAMQIZJakOwBBmACAdIsIMgoBzI9D/UgqKxCk4CnEDBBB4BVEYYDAGqZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181800000000
Perceptual Hash:d9d9666666339988
Difference Hash:4cb2b2320c300000
Wavelet Hash:e0f8f8f820383030
Color Hash:#931f31

Scan History

Scan history not available

Unable to load historical scan data