dogstagram-c8myob4rn-jerrykapa[.]vercel[.]app

This domain, dogstagram-c8myob4rn-jerrykapa.vercel.app, is actively impersonating Instagram as part of a social media phishing campaign. Analysis indicates the domain was registered on February 21, 2026, through Tucows Domains Inc. and remains operational as of July 12, 2026, resolving to IP 64.29.17.67 (US, AS16509 Amazon.com, Inc.). The page title explicitly displays 'Login - Instagram,' confirming its intent to deceive users into submitting credentials. The domain is hosted on Vercel infrastructure and employs HSTS, a security feature that may complicate takedown efforts by enforcing HTTPS connections. Security vendors have assigned extremely low trust scores (1/100 by Scamadviser, 0/100 by Gridinsoft), and the domain appears on two blocklists (PhishDestroy, PhishingDB). Twenty of ninety-three security vendors on VirusTotal flag the domain as malicious, though this detection rate does not confirm universal consensus. The SSL certificate is issued by Google Trust Services, which does not inherently indicate legitimacy due to the widespread availability of free certificates. Defenders should prioritize blocking this domain at the network and endpoint levels, particularly in environments where Instagram access is common. The use of Vercel hosting suggests potential scalability, as attackers may rapidly deploy additional subdomains or similar infrastructure. No evidence currently links this domain to credential harvesting kits or post-exploitation redirection, but its active status and explicit branding warrant immediate containment. Further analysis of HTTP headers or network traffic may reveal additional indicators, though no such data is currently available.