snaply-git-main-khadir-salims-projects[.]vercel[.]app

This domain, snaply-git-main-khadir-salims-projects.vercel.app, is identified as an active credential phishing site targeting Instagram users. Analysis confirms the page title as "Instagram Clone," indicating an attempt to impersonate the legitimate Instagram login interface to harvest user credentials. The domain remains operational and poses a high risk to unsuspecting users who may enter sensitive account details. Infrastructure analysis reveals the domain is registered through Vercel and resolves to the IP address 216.198.79.195. It is flagged by 18 of 95 security vendors on VirusTotal, with detection signatures ranging from phishing to malicious URL categories. The SSL certificate is issued by Google Trust Services (WR1), a common tactic to lend false legitimacy to phishing pages. The domain appears on one security blocklist, and additional threat intelligence sources confirm its malicious intent, including classification by PhishDestroy. Current status indicates the domain is still active, continuing to host the phishing content. Organizations and users are advised to block the domain and associated IP address at the network level. Endpoint protection solutions should be updated to include this domain in their blocklists. Users who may have interacted with the site should immediately reset their Instagram credentials and enable multi-factor authentication. Network administrators should monitor for connections to 216.198.79.195 and review logs for potential credential exposure.