instagram-xi-opal[.]vercel[.]app

PhishDestroy has identified instagram-xi-opal.vercel.app as an active generic phishing domain that impersonates the Instagram login page to steal user credentials. The domain was created on May 18, 2026, and remains operational at the time of this analysis, posing a high risk to anyone who encounters it. This site is designed to trick visitors into entering their Instagram username and password, which would then be harvested by malicious actors.

Technical indicators paint a clear picture of the threat. The domain is hosted at IP address 64.29.17.3 and registered through Vercel Inc., a legitimate hosting provider often abused by phishers. VirusTotal data shows that 19 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services under the identifier WR1, which is not unusual for phishing sites that obtain free certificates. Despite the recent creation date, the domain has already been widely detected, underscoring its dangerous nature.

Given the high risk level and active status, users should avoid visiting instagram-xi-opal.vercel.app under any circumstances. If you have already entered credentials on this site, change your Instagram password immediately and enable two-factor authentication. PhishDestroy recommends always verifying the authenticity of login pages by checking the official URL before entering sensitive information. Report any suspicious domains to PhishDestroy to help protect others from similar threats.