TL:DR: If it doesn't look like a VIN, it isn't.
Sometimes the forms in the source code contain nonces (uniquely generated gibberish) to avoid deduplication of web requests and other internal functions. These gibberish can contain 5y. Also sometimes source code contains the bas64 encoded images...