instagram-inky[.]vercel[.]app

This domain, instagram-inky.vercel.app, poses a high-risk credential theft threat by impersonating the official Instagram login interface. Visitors are presented with a visually convincing replica of the Instagram login page, designed to harvest usernames, passwords, and potentially linked authentication tokens. The site may also attempt to exploit session cookies or prompt users to authorize malicious third-party applications under the guise of account verification. Such stolen credentials are frequently used for unauthorized account access, financial fraud, or further phishing distribution through compromised accounts. Analysis indicates this phishing infrastructure was established on May 19, 2026, and remains actively hosted on Vercel’s platform. The domain is registered through Vercel Inc., resolving to the IP address 64.29.17.195, located within the United States. Security vendor detection on VirusTotal stands at 20 out of 95, with one additional blocklist (PhishDestroy) flagging the domain. The SSL certificate, issued by Google Trust Services (WR1), provides a false sense of legitimacy, as encrypted connections do not guarantee the authenticity of the underlying service. Users who have visited instagram-inky.vercel.app or entered credentials on this page should immediately revoke access to any linked applications via Instagram’s security settings. Change the compromised password using a trusted device and enable multi-factor authentication if not already active. Monitor the account for unauthorized posts, messages, or linked email/phone modifications. If financial or personal data was exposed, consider reporting the incident to relevant authorities and credit monitoring services. Avoid interacting with any further communications claiming to be from Instagram, as follow-up phishing attempts are likely.