instagram-log-in[.]vercel[.]app

This domain instagram-log-in.vercel.app is assessed as a brand impersonation phishing page designed to mimic Instagram login flows. The content identified with the title "Instagram clone" indicates a direct attempt to replicate a legitimate authentication interface in order to steal user credentials. The infrastructure is consistent with fake login campaigns that rely on trusted brand spoofing to increase victim interaction rates, especially by leveraging recognizable UI patterns.

Technical indicators confirm malicious classification across multiple sources. VirusTotal reports 21/95 security vendors flagging the domain as malicious. The domain is registered through Vercel Inc. and uses SSL issued by Google Trust Services / WR1. It resolves to IP 198.18.1.229 and is hosted within AS16509 Amazon.com, Inc. The domain is marked as taken offline and appears on 2 security blocklists, while also being flagged by Google Safe Browsing for phishing activity.

Users who interacted with this domain should assume credential compromise risk. Immediate actions include changing Instagram passwords and any reused credentials across other services, enabling multi-factor authentication, and reviewing active sessions for unauthorized access. Browser-stored credentials and autofill data should be cleared. Security teams should block the domain and associated IP, and review access logs for suspicious authentication attempts linked to this indicator.