fazebook-clone[.]vercel[.]app

The domain fazebook-clone.vercel.app has been identified as a high-risk brand impersonation threat targeting Facebook. Analysis indicates that this domain is designed to deceive users into believing they are interacting with a legitimate Facebook service, potentially leading to credential theft or malware distribution.

Technical indicators reveal that the domain has been flagged by 20 out of 95 security vendors on VirusTotal. The domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.67, which is located in the United States and is managed by CYPRESS COMMUNICATIONS, LLC. The domain was created on April 18, 2026. It is currently listed on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services / WR1, which may lend a false sense of security to unsuspecting users.

The domain remains active as of the latest assessment. Immediate response actions include adding the domain to additional security blocklists and notifying affected users to avoid interaction with the site. Users are advised to verify the URL of any Facebook-related page they visit and to report any suspicious activity to their security teams. The remaining risk is high, as the domain continues to impersonate a well-known brand, potentially leading to significant user compromise.