facebook-signup-page-1zav[.]vercel[.]app

Facebook-signup-page-1zav.vercel.app is currently active and poses a significant threat by impersonating Facebook. This domain is designed to deceive users into believing they are interacting with the legitimate Facebook signup page. With 21 out of 91 vendors on VirusTotal marking it as malicious, the domain is clearly recognized as a threat by multiple security entities.

Hosted on an IP address located in the US, specifically under Vercel, Inc's infrastructure, this domain leverages a Google Trust Services SSL certificate, which may lend it an appearance of legitimacy to unsuspecting users. The domain's registration through Vercel and its operation under the guise of a Facebook signup page highlight its intent to capture sensitive user information.

Interestingly, the domain is listed on only one public blocklist, which is maintained by PhishDestroy. This indicates that while the domain is recognized by many security vendors, it may not yet be fully integrated into broader blocklist databases. This underscores the importance of proactive threat detection and the need for organizations to stay ahead of such phishing attempts.

The domain's creation date of April 26, 2026, suggests an anomaly, likely a data error, as it indicates a future date. Despite this, the domain's active status and the high number of VirusTotal detections emphasize the urgency of addressing this threat. Users should be cautious when encountering sites mimicking trusted brands like Facebook, as these are prime targets for phishing attacks.