facebook-clone-blush-alpha[.]vercel[.]app

The domain facebook-clone-blush-alpha.vercel.app is actively used for brand impersonation, specifically mimicking the popular social media platform Facebook. This phishing site is designed to trick users into believing they are interacting with Facebook, potentially leading to the theft of login credentials, personal information, or financial data. The threat is significant, and users should exercise caution when encountering this domain.

Analysis of the domain reveals that it is flagged by 21 out of 95 security vendors on VirusTotal, indicating a high level of suspicion and potential risk. The domain is registered through Vercel Inc., a cloud development platform, and currently resolves to the IP address 64.29.17.3, which is located in the United States and belongs to AS16509 Amazon.com, Inc. The site appears on two security blocklists, PhishDestroy and PhishingDB, further confirming its malicious nature. The page title, 'Facebook - Clone,' is a clear indicator of the impersonation attempt, and the SSL certificate is issued by Google Trust Services / WR1, which does not guarantee the legitimacy of the site's content or purpose.

If a user has visited facebook-clone-blush-alpha.vercel.app, they should immediately check their Facebook account for any unauthorized activity. It is recommended to change the password and enable two-factor authentication (2FA) for added security. Users should also monitor their financial accounts and personal information for any signs of misuse. Reporting the incident to Facebook's security team and using reputable anti-phishing tools can help mitigate the risk of further exposure.