instalgram[.]vercel[.]app

Instalgram.vercel.app emerges as a significant threat, with 23 out of 94 VirusTotal vendors flagging it as malicious. The domain masquerades as Instagram, aiming to deceive users into divulging sensitive information. Google Safe Browsing also flags this domain, adding to its notoriety.

The domain is registered through Vercel Inc. and hosted on an IP address in the United States, specifically 64.29.17.131. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. The domain's creation and detection by PhishDestroy both occurred on April 18, 2026, indicating a swift identification of this threat.

PhishDestroy's platform assigns a maximum risk score of 100/100 to instalgram.vercel.app, underscoring its potential to cause harm. The domain's presence on public blocklists, including PhishDestroy's own, further highlights its malicious intent. The use of a similar name to Instagram is a common tactic in phishing schemes, designed to exploit user trust and familiarity with the brand.

This domain's rapid detection and inclusion in security databases demonstrate the effectiveness of proactive threat monitoring. However, the ongoing activity of instalgram.vercel.app serves as a reminder of the persistent nature of phishing threats. Users need to remain cautious when encountering domains that mimic well-known brands, as these can lead to significant data breaches and financial losses.