facebook-frontend-capstone[.]vercel[.]app

PhishDestroy identifies facebook-frontend-capstone.vercel.app as an active brand impersonation domain designed to mimic Facebook. This fraudulent site leverages Facebook’s visual branding to trick users into sharing login details or downloading malicious content. The page’s layout closely mirrors legitimate Facebook pages, making it difficult for casual visitors to distinguish it from the real site. Once a user interacts with the page—whether by entering credentials or clicking suspicious links—the attackers can harvest sensitive information or initiate unauthorized actions on the victim’s behalf. This domain was flagged on multiple security platforms, including OpenPhish and VirusTotal, where 22 out of 95 security vendors detected malicious activity as of the latest analysis. The domain is registered through Vercel Inc., a legitimate hosting provider often abused by threat actors to deploy deceptive pages quickly. The SSL certificate is issued by Google Trust Services, which does not guarantee the site’s legitimacy—only that the connection is encrypted. The domain resolves to IP address 216.198.79.67 and has already been blocked by one major security blocklist. If you visited facebook-frontend-capstone.vercel.app, avoid entering any personal information, including usernames, passwords, or payment details. Immediately run a malware scan on your device using trusted antivirus software. Change your Facebook password from a separate, verified device and enable two-factor authentication. Report the domain to Facebook’s phishing reporting tool and your organization’s security team if this occurred on a work device. Stay vigilant for unusual activity on your accounts, such as unrecognized logins or messages sent from your profile.