instant-verify[.]vercel[.]app

The domain instant-verify.vercel.app is identified as a high-risk credential phishing site. It targets users by mimicking Meta's verified blue tick process, potentially leading to the theft of login credentials and personal information. The threat actor likely aims to exploit the trust users have in legitimate Meta services to gain unauthorized access to accounts.

Technical analysis reveals that instant-verify.vercel.app has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain is registered through Vercel Inc., a popular web development platform, and resolves to the IP address 64.29.17.3, located in the United States. The SSL certificate is issued by Google Trust Services / WR1, which may be used to gain user trust. The domain was created on March 26, 2026, and currently appears on one security blocklist, including PhishDestroy. The domain's status on Google Safe Browsing (GSB) is not mentioned, but its presence on blocklists suggests it is known to security researchers.

The domain is currently active, posing an ongoing threat to unsuspecting users. Organizations and individuals should implement response actions such as blocking the domain at the network level, educating users about the risks of credential phishing, and deploying endpoint protection solutions. Despite these measures, the domain remains a high risk due to its ability to mimic legitimate Meta services, potentially leading to significant account compromises and data theft.