clone-login-insta[.]vercel[.]app

This domain is assessed as high risk due to active brand impersonation of Facebook, masquerading as an Instagram login page to harvest credentials. The page title 'Login Instagram' is a clear attempt to deceive users into believing they are accessing a legitimate social media platform. The domain remains live, posing an ongoing threat to anyone who encounters it.

Technical indicators confirm the severity: VirusTotal reports 21 out of 95 security vendors flagging this domain as malicious. The domain was registered on February 21, 2026, through Tucows Domains Inc., and resolves to IP address 64.29.17.195. It appears on two security blocklists and uses an SSL certificate issued by Google Trust Services / WR1, which may lend a false sense of legitimacy. The active status and low blocklist count suggest the domain has not been widely mitigated.

To mitigate this threat, users and organizations should block access to clone-login-insta.vercel.app at the network level and add it to email security filters. Individuals who may have visited the site should change their Facebook and Instagram passwords immediately and enable two-factor authentication. PhishDestroy recommends reporting the domain to hosting provider Vercel and the registrar Tucows for takedown. Regular monitoring for similar domains is advised to prevent future attacks.