data-collection-neon[.]vercel[.]app

The domain data-collection-neon.vercel.app is actively engaged in brand impersonation, specifically targeting Facebook users. Analysis indicates that the domain is designed to deceive users into providing their Facebook login credentials, which can lead to unauthorized access to personal accounts and potential data theft. The threat level is assessed as high due to the domain's ability to mimic the legitimate Facebook login page and its recent creation date.

Evidence from VirusTotal shows that 22 out of 95 security vendors flag this domain as malicious. The domain is registered through Tucows Domains Inc. and was created on February 21, 2026. It resolves to the IP address 216.198.79.67, which is located in the United States and is part of Amazon.com, Inc.'s network (AS16509). The SSL certificate for this domain is issued by Google Trust Services, providing an additional layer of trust that may be exploited to reduce user skepticism. Currently, the domain appears on one security blocklist, indicating that it has been identified as a threat by at least one security organization.

Users who have visited this domain are advised to immediately change their Facebook login credentials and enable two-factor authentication (2FA) to enhance account security. It is also recommended to monitor account activity for any unauthorized changes or suspicious behavior. If users suspect that their accounts have been compromised, they should report the incident to Facebook and consider running a comprehensive scan of their devices for potential malware.