instagram-clone-v2[.]vercel[.]app

instagram-clone-v2.vercel.app is a verified phishing domain impersonating Instagram, currently active and posing an elevated threat to users. The domain leverages a visual clone of Instagram’s interface to harvest login credentials and personal data, exposing victims to account takeover and identity theft. PhishDestroy identifies this as a live Instagram phishing campaign with confirmed malicious intent and widespread detection across security platforms.

This domain was flagged by 22 of 95 VirusTotal security vendors, indicating strong consensus on its malicious nature. It resolves to IP address 64.29.17.195 and is registered through Vercel Inc. The domain holds a valid SSL certificate issued by Google Trust Services, adding a false sense of legitimacy. It has been blocked by Phishunt and appears on one active blocklist. Despite its professional hosting and certificate, the combination of high detection rates and impersonation of a major social platform confirms its fraudulent purpose.

The domain remains actively accessible and continues to deceive users through realistic UI mimicry. PhishDestroy recommends blocking instagram-clone-v2.vercel.app at the network and browser levels, avoiding any interaction including login attempts, and reporting the domain to Instagram and security platforms. Users who have already entered credentials should immediately change their Instagram password, enable two-factor authentication, and monitor for unauthorized account activity. Organizations are advised to update firewall rules and DNS blocklists to prevent access from corporate networks.