facebookclone-pearl[.]vercel[.]app

This domain, facebookclone-pearl.vercel.app, poses a high-risk credential harvesting threat by impersonating Facebook's login interface. Visitors are presented with a fraudulent page titled 'Facebook - log in or sign up,' designed to trick users into entering their account credentials. The site mimics legitimate Facebook branding and layout, increasing the likelihood of successful deception, particularly among users who may not scrutinize the URL or page source closely. Analysis indicates this infrastructure was registered on May 07, 2026, through Vercel Inc., a platform commonly used for hosting static sites and applications. The domain resolves to the IP address 216.198.79.131, located in the United States under Vercel's network. Security validation reveals that 20 out of 95 antivirus engines on VirusTotal have flagged this domain as malicious, and it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WR1), further confirms the site's active status and operational intent. If you or someone you know has visited facebookclone-pearl.vercel.app and entered login credentials, immediate action is required. First, change the password for the affected Facebook account and enable multi-factor authentication if not already active. Review the account for unauthorized activity, such as unfamiliar posts, messages, or linked applications. Clear browser cache and cookies to remove any residual session data. Monitor connected email accounts for password reset attempts or suspicious login notifications. Users should also report the domain to their security software provider and consider notifying contacts who may have received messages from the compromised account.