Phishing detection: facebook-six-ivory.vercel.app
Facebook Investigate
Domain
facebook-six-ivory.vercel.app0 CT hosts on apex
IP
216.198.79.3
URL
http://facebook-six-ivory.vercel.app
Cert
WR1
Phishunt analysis Beta
75
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.9 Password field
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.0 Young domain
- +1.6 Favicon (kit)
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.6 Long domain
- +0.6 Script exfil endpoint
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 External scripts
- +0.1 Deep subdomain
- Boosted to 75: Credential exfil kit
24 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Fake Facebook login page deployed on Vercel free PaaS hosting, with the brand name embedded in the subdomain and page title to appear legitimate. Contains a password input form and is confirmed malicious by OpenPhish. Targets Facebook account credentials.
OpenPhishPaaS hostPassword field
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-21 · confidence 93%
Domain & Network
Whois
Registrar
Tucows Domains Inc
Network
IP
216.198.79.3
Country
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
WR1
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise