instagram-2-0-4p6f5s6nd-chibokaxavier[.]vercel[.]app

This domain, instagram-2-0-4p6f5s6nd-chibokaxavier.vercel.app, is actively engaged in credential theft through brand impersonation of Instagram. Analysis confirms the page mimics the official Instagram login interface, targeting users to harvest account credentials. The domain remains operational as of the latest verification, posing a high risk to unsuspecting visitors. Infrastructure analysis reveals the domain resolves to the IP address 216.198.79.67 and was registered through Vercel Inc. The domain was created on April 01, 2026, though this date may reflect spoofed or manipulated registration data. Security vendors on VirusTotal have flagged this domain as malicious, with 22 of 95 engines detecting it as a threat. Additionally, the domain appears on one security blocklist, further corroborating its fraudulent nature. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, is frequently exploited by threat actors to lend credibility to malicious sites. The current status of this domain is active, and users are advised to exercise extreme caution. Immediate actions include blocking the domain at the network level, reporting it to relevant security teams, and avoiding any interaction with the site. Organizations should update their endpoint protection rules to detect and prevent access to this domain. Users who may have entered credentials on this page should reset their passwords immediately and enable multi-factor authentication on all accounts to mitigate potential compromise.