facebook-login-page-clone-gamma[.]vercel[.]app

The domain facebook-login-page-clone-gamma.vercel.app is identified as a high-risk brand impersonation threat, actively targeting Facebook users. Currently active, this domain employs deceptive tactics to lure users into providing sensitive information under the guise of a legitimate Facebook login page. The page title found on the domain is 'Facebook - log in or sign up', further enhancing its impersonation strategy to deceive users.

Technical analysis reveals that the domain is flagged by 24 out of 95 security vendors on VirusTotal, indicating a significant consensus among security solutions regarding its malicious nature. Registered through Vercel Inc., the domain was created on January 28, 2020, and resolves to the IP address 216.198.79.131, which is located in the United States under AS16509, operated by Amazon.com, Inc. The SSL certificate for the domain is issued by Google Trust Services / WR1. Additionally, the domain appears on one security blocklist and is flagged by Google Safe Browsing as a phishing site, reinforcing the threat level.

Given the current active status of the domain, immediate action is recommended to mitigate potential risks. Users should be advised to avoid interacting with the domain and to verify the authenticity of any Facebook login pages they encounter. Security teams should ensure that the domain is included in blocklists and monitor network traffic for any attempts to access it. Regular updates to security software and awareness training for end-users can further reduce the risk posed by such impersonation threats.