googleclone-felipealmeida[.]vercel[.]app

This domain is flagged as a high-risk instance of brand impersonation targeting Google, designed to deceive users into disclosing credentials or sensitive information. Analysis indicates the infrastructure is actively hosting a fraudulent page titled 'Google Clone,' mimicking legitimate Google services to exploit user trust and facilitate credential harvesting or malware distribution. Infrastructure analysis reveals the domain googleclone-felipealmeida.vercel.app was registered on April 03, 2026, through Vercel Inc. and resolves to the IP address 216.198.79.195, located in the United States. Security vendor detections on VirusTotal report 20 out of 95 engines flagging the domain as malicious. The domain appears on one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. The SSL certificate is issued by Google Trust Services under the identifier WR1, which may further mislead users into perceiving the site as legitimate. Despite its recent creation, the domain remains active and unmitigated. Mitigation requires immediate action from network defenders and end users. Organizations should block the domain and its resolving IP (216.198.79.195) at the perimeter firewall and DNS filtering layers. Security teams are advised to monitor for connections to this infrastructure within internal logs and endpoint detection systems. End users should be educated to verify domain authenticity before entering credentials, particularly on pages with mismatched SSL certificates or unconventional subdomains. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.