instagram-login-page-theta[.]vercel[.]app

The domain instagram-login-page-theta.vercel.app poses a high-risk threat specifically categorized as credential phishing. This assessment is based on multiple indicators and data points that suggest the domain is actively being used to steal user credentials, potentially leading to account compromise and further malicious activities.

Infrastructure analysis reveals that the domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.195, which is located in the United States. The SSL certificate for this domain is issued by Google Trust Services / WR1, which might lend a false sense of security to unsuspecting users. According to VirusTotal, 14 out of 95 security vendors have flagged this domain as malicious. The domain also appears on one known security blocklist and has been flagged by Google Safe Browsing for phishing activities. It is currently blocked by PhishDestroy, indicating that it is recognized as a threat by security services. The page title 'Instagram Login' further supports the impersonation of Instagram's official login page, making it a convincing phishing site.

To mitigate the risks associated with this credential phishing threat, users are advised to verify the URL of the login page they are accessing, ensuring it is the official Instagram domain. Security teams should implement DNS filtering and web protection solutions to block access to this domain. Additionally, users should be educated on the signs of phishing, such as unexpected login prompts, unsecured connections, and suspicious email communications. Regularly updating account passwords and enabling two-factor authentication can also help prevent unauthorized access even if credentials are compromised.