login-face.vercel.app
Catégorie : Phishing
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Description de login-face.vercel.app
The domain login-face.vercel.app appears to host a web page designed to imitate a Facebook login screen. The screenshot shows Facebook branding, a username/password form in Portuguese, and account-related prompts, while the page title is a generic "Document," which does not match the branding shown on the page.
Based on the domain structure, this is a subdomain hosted on Vercel rather than an official Facebook-owned domain. The naming pattern "login-face" and the visible page content suggest the site may be intended to collect account credentials by resembling a well-known social media login portal rather than serving as an independent social platform or legitimate business website.
Évaluation de sécurité de login-face.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 19 out of 91 security engines, and a major blacklist database listed it for social-engineering activity. In addition, the page visually resembles Facebook's sign-in page while being hosted on an unrelated vercel.app subdomain, which may indicate an attempt to imitate a trusted brand and capture user credentials.
Although the malware scan did not identify malicious files in the small set of scanned resources, that does not offset the stronger phishing-related indicators. Credential-harvesting pages often contain minimal static code and may still appear technically simple while posing risk to visitors. Based on these findings, this website may pose potential risks to visitors.
Description technique
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is hosted on Vercel infrastructure, resolving to an IP address in the United States. The presence of HTTPS may help encrypt traffic in transit, but it should not be treated as proof of legitimacy. DNSSEC appears to be unsigned.
From a technical standpoint, the page seems lightweight, with a small number of local CSS/image assets and external font resources, and no flagged iframes or malicious files were reported in the provided file scan. However, the combination of brand-like login content on a third-party hosting subdomain, generic metadata, and phishing-related reputation detections is a notable concern at the time of this scan.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?