Security Scan Report: mismates27272.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 3 countries across 12 domains to perform 15 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://mismates27272.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Facebook login on a vercel.app subdomain uses a 'detected sexual content' pretext to harvest phone/email and password, sending them to an unrelated third-party PHP endpoint.

Risk Factors (6)
Brand impersonation of Facebook on a domain that is not facebook.com
Credential harvesting form submitting passwords to a third-party domain (marines.materiales.site/pasta.php)
Hidden password/hash field not visible to the user
Fear/lure pretext about detected 'sexual content' to force re-authentication
Free hosting-platform subdomain (vercel.app) with unknown creation date, unranked in Cisco Umbrella
IDS alerts for actor-abused cloud hosting and unknown tracking domains
Domain age information unavailable

Details

Page Title

Foottooos D1sscrettaass

Scan Type

public

Domain Name Analysis

The domain 'mismates27272.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'mismates27272'. The core label 'vercel' covers 6 characters split between 2 vowels and 4 consonants. Splitting it apart reveals two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mismates27272.vercel.app/

Page Load Overview

4.91s
Total Load Time
582 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:222 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network99% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
99%
adult content
98%
phishing scam
62%
documentation technical
33%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0192.178.183.97Google · CDNUnited States
AS15169Google LLC
0195.154.239.27Paris, Île-de-France, France
AS12876Scaleway SAS
0151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
0104.26.4.7Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.20.41.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.70.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0216.239.34.36Google · CDNUnited States
AS15169Google LLC
1520--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T108525D5B9DC604439003946463F7EB482D7AA507E116CD6E3AEC37A46FC1BE6459339C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:BCneBtNNuMMFDAC0n3pYiPJeGUf2VE7cdhcIGO5tlR/enXJPc/6+Kkemh+cMhn:BCwtzMF9o0TBnpi6+KtHcOn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14495:VAEI0gphsBIyGYEAQiDGJUpAcAgZdCgtROE80mXhBAPUNeIgbAAGx4ENEZxzDQYMozBoAIkImCkDKCjUhqABZjaCEQRAgEWQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3dbdbdbc3c3c3ff
Perceptual Hash:b898c633666cc9ce
Difference Hash:9692b2968e9e9668
Wavelet Hash:031b1b030303c36f
Color Hash:#8479d2

Scan History

Scan history not available

Unable to load historical scan data