instagram-clone-login[.]vercel[.]app

This domain, instagram-clone-login.vercel.app, is an active credential phishing site designed to steal Instagram login credentials. The site mimics the appearance of the legitimate Instagram login page, tricking users into entering their usernames and passwords. Once submitted, these credentials are harvested by threat actors for unauthorized account access, identity theft, or further malicious activities such as spreading spam or conducting financial fraud. Analysis indicates this domain is hosted on infrastructure associated with Vercel Inc. and resolves to the IP address 64.29.17.131, located in the US under AS16509 (Amazon.com, Inc.). Security vendors have flagged the domain as malicious, with 22 out of 95 engines on VirusTotal detecting it as phishing. Google Safe Browsing also classifies it as a phishing threat, and it appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's malicious intent. If you or someone you know has visited instagram-clone-login.vercel.app and entered login credentials, immediate action is required. First, change the password for the affected Instagram account and enable two-factor authentication if not already active. Review the account for any unauthorized activity, such as posts, messages, or connected apps that were not authorized. Additionally, monitor linked email accounts for suspicious login attempts or password reset requests. If financial or personal data was exposed, consider reporting the incident to relevant authorities and credit monitoring services.