clone-ui-instagram-psi[.]vercel[.]app

The domain clone-ui-instagram-psi.vercel.app is assessed as a high-risk brand impersonation threat targeting Facebook. This domain actively impersonates the Instagram user interface, which is a well-known property of Facebook, and is designed to deceive users into believing they are interacting with a legitimate Instagram service.

Infrastructure analysis reveals that the domain resolves to the IP address 216.198.79.131, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The domain was registered through Tucows Domains Inc. on February 21, 2026. The SSL certificate is issued by Google Trust Services / WR1, which may lend a false sense of security to unsuspecting users. According to VirusTotal, 21 out of 95 security vendors have flagged this domain, indicating a significant level of suspicion. The domain also appears on one security blocklist, specifically PhishDestroy, further corroborating the threat. The page title 'Instagram UI' is a clear indicator of the impersonation attempt.

To mitigate the risks associated with brand impersonation, it is recommended that Facebook and Instagram take immediate action to report and block this domain. Users should be educated to verify the URL and SSL certificate details before entering any credentials or sensitive information. Additionally, implementing domain monitoring tools and regularly updating security advisories can help in early detection and prevention of such threats. Organizations should also consider deploying web filters and firewalls to block access to this domain from their networks.