blyaddddd[.]vercel[.]app

Analysis of the domain blyaddddd.vercel.app indicates that it is actively engaged in brand impersonation, specifically targeting Facebook. This domain poses a high risk of credential theft and potential financial loss to users who may be misled into believing they are interacting with an official Facebook service.

This domain is flagged by 23 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Vercel Inc., and the SSL certificate is issued by Google Trust Services / WR1. Infrastructure analysis reveals that the domain resolves to the IP address 64.29.17.67, which is located in the United States and is part of the AS16509 network operated by Amazon.com, Inc. The page title 'e-Devlet Kapısı Devletin Kısayolu | www.türkiye.gov.tr' is a clear indicator that the site is attempting to impersonate a legitimate government service, further complicating the identification of the true target, which is Facebook.

If a user has visited blyaddddd.vercel.app, they should immediately change their Facebook account passwords and enable two-factor authentication (2FA) to enhance security. Additionally, users should monitor their accounts for any unauthorized activity and report any suspicious incidents to Facebook's security team. It is also recommended to run a full system scan using updated antivirus software to ensure no malware has been installed.