Security Scan Report: facebook-clone-zeta.vercel.app

Redirected to:
https://facebook-clone-zeta.vercel.app/
Site favicon
Submitted: Sep 16, 2026, 1:45:36 AMCompleted: Sep 16, 2026, 1:46:49 AMpubliccompleted

This website contacted 5 IPs in 1 country across 3 domains to perform 8 HTTP transactions. The main domain is facebook-clone-zeta.vercel.app and was registered 21 years ago.

Submitted URL: http://facebook-clone-zeta.vercel.app/

Effective URL:

https://facebook-clone-zeta.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Facebook-branded login page on a Vercel subdomain impersonates Facebook and harvests email/password; confirmed phishing with a primary-domain threat-intel match.

Risk Factors
Impersonates Facebook on a non-Facebook domain
Credential-harvesting login form with password field
Threat-intel phishing report for the primary domain
Hosted on a free instant-subdomain platform with unknown page creation date
Abused cloud hosting service domain alerts in network IDS
Domain age information unavailable

Details

Page Title

Facebook

Scan Type

public

Domain Name Analysis

Domain 'facebook-clone-zeta.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'facebook-clone-zeta'. The second-level label 'vercel' is 6 characters long with 2 vowels and four consonants. Breaking it apart gives 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://facebook-clone-zeta.vercel.app/

Page Load Overview

1.03s
Total Load Time
282 KB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:178 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network97% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
97%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.17.25.14CloudflareWAFUnited States
AS13335Cloudflare, Inc.
1216.198.79.195AwsCLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.67AwsCLOUDUnited States
AS16509Amazon.com, Inc.
164.29.17.67AwsCLOUDUnited States
AS16509Amazon.com, Inc.
1142.250.154.95GoogleCDNUnited States
AS15169Google LLC
85--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T150E0AB59EC70806D6330AA85BE81327CDC896C0D6BB23D10A6E664BA69B87B4C96D444

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqIY0gYkC/fAbplGMuzT62DT08Nn9LdwhhnvN66hNVeE4PopN0hB96abOa:hR01A2vDg8NnfUnM0Ve1ojTba

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:8ff83ef23595ff59b5e49e9976b5d7ee

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff1313f3ffff
Perceptual Hash:ac9bd3642e9bd098
Difference Hash:0006996666844804
Wavelet Hash:0c0c4c0003c3ffff
Color Hash:#40bf75

Other Hashes

Crop Resistant:0006996666844804

Scan History

Scan history not available

Unable to load historical scan data