congenial-eureka-theta[.]vercel[.]app

The domain congenial-eureka-theta.vercel.app is confirmed as a high-risk brand impersonation phishing site, currently active. It impersonates Facebook, which has been a common target for phishing attacks due to its widespread user base and valuable login credentials.

Analysis indicates that the domain has been flagged by 23 of 95 security vendors on VirusTotal, suggesting a significant level of threat. It is registered through Tucows Domains Inc. and resolves to the IP address 216.198.79.195, which is located in the US and associated with AS16509 Amazon.com, Inc. The domain was created on February 21, 2026, and is currently listed on 1 security blocklist. Additionally, Google Safe Browsing has marked the domain as phishing, and it is blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services / WR1, which may lend a false sense of security to potential victims. The page title 'Naver Sign in' suggests an attempt to mislead users into believing they are accessing a legitimate Naver service, rather than a Facebook login page.

The domain remains active and poses a high risk to users. Immediate action is recommended to block this domain at the network level and educate users about the potential for brand impersonation attacks. Security teams should also monitor for related infrastructure and consider implementing more stringent security controls, such as multi-factor authentication, to protect against credential theft.