instagram-seven-wine[.]vercel[.]app

This domain, instagram-seven-wine.vercel.app, is designed to conduct credential theft targeting Instagram users. Analysis indicates the page likely presented a fraudulent login interface to capture usernames and passwords, a common tactic in social media account compromise campaigns. The domain impersonates Instagram, leveraging its brand recognition to deceive users into entering sensitive credentials, which can then be exploited for unauthorized access or further malicious activity. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. on February 21, 2026, an unusually future-dated creation that may indicate domain spoofing or registrar manipulation. It appears on two security blocklists (PhishDestroy and PhishingDB) and is flagged by 15 out of 95 security vendors on VirusTotal. The domain resolves to IP address 64.29.17.3, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, does not mitigate the malicious intent of the domain. Users who visited instagram-seven-wine.vercel.app should immediately reset their Instagram credentials using a secure, unrelated device. Enable multi-factor authentication on all accounts to prevent unauthorized access. Monitor linked email accounts for suspicious activity, such as password reset requests or login attempts from unfamiliar locations. If credentials were entered, assume they are compromised and avoid reusing them across other platforms. Report the incident to the affected service provider and consider scanning the device used to visit the domain for potential malware or unwanted extensions.