formulario-facebook[.]vercel[.]app

Analysis of the domain formulario-facebook.vercel.app indicates a confirmed brand impersonation targeting Facebook, classified as a social media phishing operation. The domain was registered on February 21, 2026, through Tucows Domains Inc. and hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States, resolving to IP address 216.198.79.3. As of July 23, 2026, the domain is offline, returning an HTTP 451 status with the page title 'Deployment Unavailable.' Infrastructure analysis reveals the use of Vercel hosting and HSTS implementation, which may have been leveraged to lend legitimacy to the phishing attempt. Security vendor detections are substantial: 16 of 93 engines on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist, including PhishDestroy.

Trust scores from Gridinsoft and Scamadviser both rate the domain at 0/100 and 1/100, respectively, further corroborating its fraudulent nature. The SSL certificate is issued by Google Trust Services (WR1), a common practice among phishing domains to avoid browser warnings. While the exact content of the phishing page is not available for analysis due to its offline status, the domain name and known intelligence explicitly indicate an intent to impersonate Facebook login or form submission pages.

Defenders should treat this domain as a confirmed threat and block it at the network level. Security teams are advised to monitor for related domains using similar naming conventions (e.g., 'formulario-facebook') or hosting patterns on Vercel or other cloud platforms. Given the elevated risk and confirmed detections, this domain should be considered compromised and unsafe for any user interaction.