facebook-task-one[.]vercel[.]app

This domain, facebook-task-one.vercel.app, is actively flagged as a high-risk brand impersonation site targeting Facebook users. Registered on May 18, 2026, through Vercel Inc., it resolves to IP 64.29.17.195 (Vercel, Inc., US) and presents a page titled 'Facebook Task,' directly aligning with the identified scam type of brand impersonation. The domain currently returns an HTTP 200 status, indicating active hosting, and is served via a Google Trust Services SSL certificate (WR1). Infrastructure analysis reveals Vercel as the hosting provider, with HSTS enabled, though nameservers are not publicly resolvable, which may hinder passive DNS tracking. Security vendors have detected malicious activity: 22 of 92 engines on VirusTotal flag the domain, and Google Safe Browsing classifies it under 'SOCIAL_ENGINEERING.' The domain appears on at least one security blocklist and holds minimal trust scores (Gridinsoft: 0/100, Scamadviser: 1/100). No specific phishing kit or payload has been confirmed in available data, and the exact content or redirection behavior remains unanalyzed. Defenders should prioritize blocking this domain at the DNS and web proxy layers. Given the use of Vercel’s infrastructure, monitoring for newly registered subdomains under vercel.app with similar naming patterns (e.g., 'facebook-task-*') may help preempt further campaigns. The absence of resolvable nameservers suggests potential evasion tactics, warranting closer inspection of SSL certificates and IP reputation for related indicators. No legitimate association with Facebook or Meta is known, and the domain should be treated as fully compromised.