instagram-clone-tau-six[.]vercel[.]app

The domain instagram-clone-tau-six.vercel.app was registered on March 13, 2026 and is currently hosted on the Vercel platform, as indicated by the Vercel and React technology fingerprints and the presence of HTTP Strict Transport Security (HSTS). The site returns HTTP 200 responses and presents the page title "Instagram | Login," confirming a targeted brand impersonation of Instagram. Network analysis shows the domain resolves to IP address 64.29.17.3, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The TLS certificate is issued by Google Trust Services under the WR1 intermediate, providing a valid HTTPS connection but offering no indication of legitimacy. Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0/100, Scamadviser 1/100, and it appears on a single known security blocklist. VirusTotal scans report that 21 of 94 security vendors flag the domain, and it is listed by PhishDestroy as a blocked site. The overall risk assessment is high, reflecting active brand impersonation and confirmed phishing behavior. Uncertainty remains regarding the exact payload or credential harvesting mechanisms, as no page content beyond the title has been publicly analyzed. Defenders should block the domain at network perimeters, monitor DNS queries for the associated IP, and add the domain to threat intelligence feeds. Users should be warned that any login prompt originating from this URL is fraudulent and that legitimate Instagram authentication occurs only on official instagram.com domains.