testing-67[.]vercel[.]app

The domain testing-67.vercel.app has been identified as an active generic phishing threat, specifically targeting Instagram users by impersonating the Instagram login page. The phishing kit used in this campaign appears to be a generic credential harvesting form designed to steal usernames and passwords. This domain was registered through Vercel Inc. and is currently hosted on the IP address 216.198.79.131.

Technical indicators from multiple security sources confirm the malicious nature of this domain. VirusTotal data shows that 18 out of 95 security vendors flag this domain as malicious, providing strong collective evidence of its threat status. Google Safe Browsing specifically lists this domain as phishing, and it appears on one additional security blocklist. The SSL certificate is issued by Google Trust Services (WR1), which is common for legitimate sites but does not guarantee safety. The domain resolves to IP 216.198.79.131, which may be associated with other malicious activities.

As of the latest check, this phishing domain remains active and accessible, posing an ongoing risk to users who may encounter it through email, social media, or search results. No takedown actions have been reported, and the risk level remains high. Users are advised to avoid interacting with this domain, never enter credentials, and report any encounters to security teams. PhishDestroy recommends blocking this domain at the network level and educating users about Instagram phishing tactics to prevent credential theft.