facebook-clone-mu-nine[.]vercel[.]app

This domain, facebook-clone-mu-nine.vercel.app, is a high-risk brand impersonation campaign targeting Facebook. The website is designed to mimic the official Facebook login page, potentially leading users to enter their credentials on a fraudulent site. This can result in unauthorized access to personal accounts and data theft.

Analysis indicates that the domain is flagged by 20 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Tucows Domains Inc. and was created on February 21, 2026. It resolves to the IP address 216.198.79.3, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The SSL certificate is issued by Google Trust Services / WR1, which may give a false sense of security to users.

If users have visited facebook-clone-mu-nine.vercel.app, they should immediately change their Facebook account passwords and enable two-factor authentication. Additionally, users should monitor their accounts for any unauthorized activity and report any suspicious incidents to Facebook's support team. It is advised to avoid clicking on links from untrusted sources and to always verify the URL before entering sensitive information.