secure-your-account[.]vercel[.]app

This domain, secure-your-account.vercel.app, is identified as a brand impersonation phishing site targeting Facebook users. The site was designed to deceive visitors into believing they were interacting with an official Facebook Help Center page, likely to harvest login credentials or other sensitive information. The use of a legitimate-sounding subdomain and a page title matching Facebook’s support infrastructure increases the likelihood of successful deception, particularly among users who may not scrutinize URLs closely. Analysis indicates the domain was registered through Vercel Inc., a platform commonly used for hosting static sites and applications. At the time of detection, the domain was flagged by 17 out of 95 security vendors on VirusTotal, a clear indicator of malicious intent. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. Infrastructure analysis reveals the domain resolved to the IP address 64.29.17.131, located in the United States under Amazon.com, Inc.’s AS16509. The domain appears on two security blocklists and was proactively taken offline, though its prior activity remains a concern. Users who visited secure-your-account.vercel.app should assume their credentials or other sensitive data may have been compromised. Immediate action is required: reset passwords for Facebook and any accounts where the same credentials were reused. Enable multi-factor authentication (MFA) on all critical accounts to mitigate further risk. Monitor financial and social media accounts for unauthorized activity, and report any suspicious transactions or messages to the respective platform’s support team. If personal or financial information was entered, consider placing a fraud alert or credit freeze with relevant credit bureaus. Review browser and device security settings to ensure no residual malicious scripts or extensions were installed during the visit.