instagram-clone-omega-one[.]vercel[.]app

PhishDestroy identifies instagram-clone-omega-one.vercel.app as a high-risk brand impersonation scam designed to mimic Instagram and trick users into entering login credentials. This domain was specifically created to deceive visitors into believing they are accessing an official Instagram service, but it is entirely fraudulent. The site employs social engineering tactics to harvest sensitive user data, including usernames and passwords, which are then likely used for account takeovers or sold on dark web marketplaces. Security researchers have confirmed that once credentials are entered, they are transmitted to attacker-controlled servers, posing an immediate risk of identity theft and financial loss. This domain was flagged by 24 out of 95 VirusTotal security vendors, indicating widespread recognition of its malicious intent. It was registered through Vercel Inc., a legitimate hosting provider often abused by threat actors to host malicious infrastructure due to its fast deployment and low barriers to entry. The domain was created recently (exact date not disclosed in data), leveraging a Google Trust Services SSL certificate to appear legitimate and bypass initial scrutiny. It has been blocked by multiple threat intelligence feeds, including Phishunt and OpenPhish, as well as Google Safe Browsing, which categorizes it under SOCIAL_ENGINEERING—a clear indicator of its deceptive nature. The domain resolves to IP 216.198.79.3, a hosting server known for harboring fraudulent activity. If you accidentally visited this site, immediately stop interacting with it and avoid entering any credentials or personal information. If you entered login details, change your Instagram password immediately and enable two-factor authentication. Scan your device for malware using reputable antivirus software, as some phishing sites may deploy trojans or keyloggers. Report the domain to your email provider or security team if you received a link via message. Finally, avoid clicking on suspicious links in the future and verify the legitimacy of websites by checking for HTTPS, domain spelling, and official branding before entering sensitive data.