instagram-clone-nu-seven[.]vercel[.]app

This domain, instagram-clone-nu-seven.vercel.app, is actively engaged in brand impersonation targeting Instagram, a Facebook-owned platform. The threat type is specifically classified as credential theft through fraudulent login interfaces designed to mimic legitimate authentication portals. As of the latest assessment, the domain remains operational and unmitigated. Analysis indicates the domain was registered through Vercel Inc. and resolves to the IP address 64.29.17.67, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The domain was created on February 27, 2026, though this date may reflect automated or falsified registration details. Security vendors have flagged the domain in 17 of 95 VirusTotal scans, and it appears on one security blocklist. Google Safe Browsing has explicitly categorized the domain as phishing. The SSL certificate is issued by Google Trust Services (WR1), which does not mitigate the inherent risk of the fraudulent content. The domain remains active and continues to host a page titled "Instagram," reinforcing its impersonation of the legitimate platform. Organizations and end-users are advised to block the domain at the network level and update endpoint protection rules to include the IP address 64.29.17.67. Security teams should monitor for credential submission attempts originating from this domain and conduct internal investigations for any prior interactions. Users who may have engaged with the domain should reset credentials via verified channels and enable multi-factor authentication on all associated accounts.