instagram-ftfn88kgl-sebin-leeee[.]vercel[.]app

PhishDestroy identifies instagram-ftfn88kgl-sebin-leeee.vercel.app as an active Instagram credential phishing domain currently leveraging social engineering tactics to mimic the legitimate Instagram login interface. This domain poses a high-risk threat to users by attempting to deceive visitors into submitting their Instagram usernames and passwords, which are then harvested for unauthorized access or sold on cybercriminal forums. The campaign is designed to exploit trust in the Instagram brand and is currently operational, with no evidence of takedown at this time.

This domain was flagged by 22 of 95 VirusTotal security vendors, indicating significant malicious detection. It is registered through Vercel Inc., resolves to IP address 64.29.17.67, and has been blocked by one security blocklist. The domain holds a Google Trust Services SSL certificate and has been flagged by Google Safe Browsing under the category SOCIAL_ENGINEERING due to its impersonation of a legitimate social media login portal.

Given the high-risk status and confirmed malicious indicators, PhishDestroy strongly advises against accessing or interacting with instagram-ftfn88kgl-sebin-leeee.vercel.app. Users who may have entered credentials on this domain are urged to immediately change their Instagram password using official channels (instagram.com), enable two-factor authentication (2FA), and review account activity for suspicious logins. Additionally, clear browser cookies and scan devices for malware. Organizations should ensure DNS filtering rules are updated to block this domain and similar variants. Report any encounters to Instagram’s official phishing reporting system and local cybersecurity authorities. Proactive monitoring of this domain is recommended due to its active status and high detection rate among security vendors.