instagram-clone-beta-three[.]vercel[.]app

This domain, instagram-clone-beta-three.vercel.app, is an active phishing infrastructure impersonating Instagram, as indicated by its page title 'Instagram clone' and confirmed brand target. Registered on February 27, 2026, through Vercel Inc., the domain remains operational with an HTTP 200 status and is hosted on IP 64.29.17.67 (US, AS16509 Amazon.com, Inc.). Infrastructure analysis reveals the use of Vercel nameservers (ns1.vercel-dns-3.com through ns4.vercel-dns-3.com) and an SSL certificate issued by Google Trust Services (WR1). The domain is associated with an Airdrop Scam phishing kit, a classification supported by its presence on one security blocklist and a Scamadviser trust score of 1/100. Twenty of ninety-three security vendors on VirusTotal flag this domain, though the specific detection rules are not detailed in available intelligence. Defenders should note that the domain is currently blocked by PhishDestroy and has a Gridinsoft trust score of 0/100, reinforcing its high-risk status. The exact content and functionality of the site have not been analyzed, but the combination of brand impersonation, phishing kit association, and low trust scores warrants immediate mitigation. Recommended actions include blocking the domain at the DNS or proxy level, monitoring for related subdomains under the vercel.app namespace, and alerting users to potential social media phishing attempts linked to this infrastructure.