laboboinsta[.]vercel[.]app

This domain, laboboinsta.vercel.app, presents a high-risk credential phishing threat targeting Instagram users. The site displays a fraudulent login page titled 'S'identifier • Instagram,' designed to harvest usernames and passwords by mimicking the legitimate Instagram authentication interface. Visitors entering credentials on this page risk immediate account compromise, unauthorized access to personal data, and potential secondary attacks against linked accounts or contacts. Analysis indicates this phishing infrastructure was deployed on March 31, 2026, through Vercel Inc., a platform commonly abused for rapid phishing site deployment due to its free hosting and SSL certificate provisioning. The domain resolves to IP address 64.29.17.195, located in the United States under Vercel's network. Security vendor detection on VirusTotal shows 21 out of 95 engines flagging the domain as malicious, with one security blocklist already listing it. The SSL certificate, issued by Google Trust Services (WR1), provides a false sense of security while facilitating encrypted credential transmission to attackers. If this domain was visited, immediate action is required to mitigate risk. Users should first change their Instagram password using a verified device and enable multi-factor authentication if not already active. Review recent account activity for unauthorized logins or posts, and revoke access to any suspicious third-party applications. Monitor linked email accounts for password reset attempts or unusual activity. Organizations should add the domain laboboinsta.vercel.app and IP 64.29.17.195 to network blocklists, and consider implementing DNS filtering to prevent access to known phishing infrastructure. Security teams should investigate any internal systems that accessed this domain for potential credential exposure or malware infection.