project-delta-brown[.]vercel[.]app

This domain, project-delta-brown.vercel.app, poses a high-risk brand impersonation threat targeting Facebook users. The site presents itself as a legitimate Facebook login page, designed to deceive visitors into entering their credentials. Once submitted, these credentials are harvested by threat actors for unauthorized account access, financial fraud, or further phishing campaigns. The site’s infrastructure and content closely mimic Facebook’s branding, including logos, layout, and language, making it difficult for users to distinguish from the authentic platform. Analysis indicates this domain was registered on February 21, 2026, through Tucows Domains Inc. and is currently hosted on Amazon Web Services (AS16509) at IP address 64.29.17.3. It is flagged by 17 out of 95 security vendors on VirusTotal, and appears on two security blocklists, including PhishDestroy and PhishingDB. The page title explicitly reads 'Facebook Clone,' a clear indicator of its malicious intent. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. If you or someone you know has visited project-delta-brown.vercel.app, immediate action is required. First, do not enter any credentials or personal information. If credentials were already submitted, change the password for the affected Facebook account and enable multi-factor authentication. Check the account for unauthorized activity, such as unfamiliar posts, messages, or linked devices. Report the incident to Facebook’s security team and consider monitoring financial accounts for suspicious transactions. Additionally, scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Avoid interacting with the domain or any links associated with it, and notify others who may be targeted by this campaign.