Security Scan: Facebook Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9759a85d-5c68-4912-9bc6-f65398d417e0 Domain and IP registration (RDAP)/api/v1/rdap/9759a85d-5c68-4912-9bc6-f65398d417e0 Certificate Transparency/api/v1/ct/sardineext.vercel.app How often this domain was scanned/api/v1/domain/stats/sardineext.vercel.app Scan history for this domain/api/v1/domain/history/sardineext.vercel.app?limit=15

This website contacted 6 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is sardineext.vercel.app and was registered 23 years ago.

Submitted URL: https://sardineext.vercel.app/user/index_facebook.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed Facebook/Meta phishing page on a free vercel.app subdomain: it clones the Facebook login and collects entered email/password, and the domain is corroborated as phishing by two independent threat feeds. Never enter credentials.

Risk Factors (6)

Brand impersonation of Meta/Facebook on a non-Facebook domain

Credential capture form (password + email/username fields)

Multi-source corroborated phishing threat-intel match against the primary domain

Free/instant hosting-platform subdomain (vercel.app) with unknown actual creation date

Unranked domain in Cisco Umbrella top 1M

External IP-lookup callbacks (ipapi.co, ip-api.io) from the page's JavaScript

Domain age information unavailable

Details

Page Title

Facebook Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'sardineext.vercel.app' on the application-focused generic top-level domain (.app), featuring subdomain 'sardineext'. Its registrable label 'vercel' stretches across 6 characters with 2 vowels and 4 consonants. Breaking it apart gives two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.09s

Total Load Time

441 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:80 chars

Detector Agreement:50%

Website Classification

Primary Category

social media network99% confidence

Type: webapp

Method: ml+structural

All Detected Categories

social media network

99%

news media journalism

46%

social media

15%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	136.243.156.168	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
1	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	6	-	-