facebook-clone-rho-two[.]vercel[.]app

The domain facebook-clone-rho-two.vercel.app was registered on March 5, 2026 through Vercel Inc. and currently resolves to IP 64.29.17.195, an address owned by AS16509 Amazon.com, Inc. in the United States. An HTTPS connection is presented with a Google Trust Services certificate issued to WR1, and the server returns HTTP 200. The page title returned is "Facebook," while the intelligence profile labels the activity as a brand impersonation campaign targeting Adobe. VirusTotal records indicate that 20 of 94 security vendors have flagged the domain as malicious. Independent scoring services assign a Gridinsoft trust score of 0/100 and a Scamadviser score of 1/100, reflecting extremely low trust. The domain is listed on one security blocklist and has been blocked by PhishDestroy, yet its status remains active. Given the combination of a recent creation date, low trust scores, multiple vendor detections, and confirmed brand‑impersonation intent, defenders should treat the domain as high‑risk. Recommended actions include adding the domain to network and email blocklists, monitoring DNS queries for the associated IP, and inspecting any traffic that attempts to load resources from the host. Continuous re‑evaluation is advised as additional telemetry becomes available.