login-face[.]vercel[.]app

PhishDestroy identifies login-face.vercel.app as a credential phishing domain specifically targeting Facebook users. This domain is currently active and poses a high risk to anyone who may encounter it. The page title is simply "Document," which is a common tactic to avoid raising suspicion while hosting a fake login form designed to steal usernames and passwords.

Technical analysis reveals that this domain has been flagged by 15 of 95 VirusTotal security vendors, indicating widespread recognition as malicious. Google Safe Browsing also flags it for phishing. The domain is registered through Vercel Inc. and resolves to IP address 64.29.17.3. It appears on one security blocklist and has an SSL certificate issued by Google Trust Services, which can give users a false sense of security. The domain remains active at the time of this report.

Given the high risk level and active status, users should avoid visiting this domain entirely. If credentials have been entered on this site, they should be changed immediately on the legitimate Facebook platform and any other services using the same password. Enable two-factor authentication on all accounts as an added security measure. Report the domain to phishing databases and consider using browser extensions that block known malicious sites.