instagram-clone-eta[.]vercel[.]app

This domain, instagram-clone-eta.vercel.app, poses a high-risk credential theft threat by impersonating the Instagram login interface. Users who enter their credentials on this site risk immediate account takeover, unauthorized access to personal data, and potential follow-on attacks targeting linked accounts or financial information. The site is designed to harvest usernames, passwords, and session tokens, which may be used for further exploitation or sold on underground markets. Analysis indicates this is not a legitimate service. The domain was registered on May 24, 2026, through Vercel, a platform commonly abused for hosting phishing pages due to its free tier and rapid deployment capabilities. As of the latest scan, 20 out of 95 security vendors on VirusTotal flag this domain as malicious, with detections specifically labeling it as a phishing or credential theft site. Additionally, the domain appears on one security blocklist and is actively blocked by enterprise-grade threat intelligence feeds. If you have visited instagram-clone-eta.vercel.app or entered any credentials, take immediate action. First, change your Instagram password using a trusted device and enable multi-factor authentication if not already active. Review your account for unauthorized activity, including posts, messages, or linked apps you did not authorize. Check connected email accounts and other social platforms for signs of compromise, as attackers may attempt to pivot using stolen credentials. Monitor financial accounts if payment methods are linked to your Instagram profile. Report the incident to Instagram’s official support channels and consider filing a report with local cybercrime authorities or dedicated fraud reporting platforms.