socialhub1[.]vercel[.]app

This domain is flagged as a high‑risk brand‑impersonation site targeting Google. socialhub1.vercel.app was registered on 27 February 2026 via Vercel Inc. and is hosted on the Vercel platform, using four vercel‑dns‑3.com nameservers. DNS resolution points to 216.198.79.195, an IP owned by Amazon.com, Inc. (AS16509) and geolocated in the United States. The site presents the page title “Instagram Clone” and is classified as a tech‑support scam, indicating that victims may be lured into providing remote‑access credentials or payment information. Security telemetry shows a Google Trust Services / WR1 SSL certificate, but the certificate does not mitigate the malicious intent. Reputation services assign a Gridinsoft trust score of 0/100 and a Scamadviser score of 1/100, and the domain appears on one public blocklist. VirusTotal analysis recorded detections from 16 of 93 scanners, confirming malicious behavior. The domain is currently active and has already been blocked by PhishDestroy. Concrete evidence of the exact payload or credential‑harvesting mechanism is not publicly available, so the full attack chain remains uncertain. Defenders should immediately block the domain at network and DNS layers, add the IP address to threat‑intel feeds, and monitor for any related Vercel‑hosted subdomains. Continuous re‑scanning of the host and rapid ingestion of updated indicator feeds are recommended to mitigate potential exposure.