messenger-clone-taupe[.]vercel[.]app

The domain messenger-clone-taupe.vercel.app is currently active and serves a page titled “Messenger Clone”. Infrastructure analysis shows the site is hosted on Vercel, Inc. and resolves to the IP address 216.198.79.131, which is geolocated to the United States. The TLS certificate is issued by Google Trust Services under the WR1 certificate profile, indicating a valid HTTPS endpoint. The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal scanning reports that 18 of 91 security vendors have classified the domain as malicious, confirming a consensus of risk. HTTP requests return a 200 status code, suggesting the site is reachable and serving content. Beyond the page title, no additional content analysis is available, so the exact phishing mechanics and credential‑stealing vectors remain unknown. Defenders should immediately add messenger-clone-taupe.vercel.app to URL filtering rules and endpoint protection blocklists, monitor outbound traffic for connections to the associated IP, and consider sinkholing the address to disrupt potential abuse. Continuous re‑evaluation is advised, as further threat intelligence may reveal additional indicators of compromise or targeted brand impersonation.