agam-rouge[.]vercel[.]app

PhishDestroy has identified agam-rouge.vercel.app as a high-risk generic phishing domain masquerading as Instagram. The site is designed to steal login credentials by imitating the Instagram authentication page. It is hosted on Vercel and currently remains active, posing an ongoing threat to users who may inadvertently visit the fraudulent page.

Technical analysis reveals that agam-rouge.vercel.app has a VirusTotal detection score of 20 out of 95 security vendors, indicating widespread recognition as malicious. The domain was registered on April 18, 2026, through Vercel, and resolves to IP address 64.29.17.131. It is listed on one security blocklist, though it has not yet been flagged by Google Safe Browsing. The SSL certificate is issued by Google Trust Services (WR1), which may lend a false sense of legitimacy to visitors.

As of the latest check, the phishing site remains live and accessible. Users are strongly advised to avoid interacting with this domain and to report any login pages requesting Instagram credentials that do not originate from the official instagram.com domain. PhishDestroy recommends that organizations and individuals block access to this domain at the network level and educate users about identifying phishing attempts. While no drainer kit has been associated with this site, the risk of credential theft is high, and prompt action is necessary to mitigate potential harm.