instagram-cam[.]vercel[.]app

PhishDestroy has identified instagram-cam.vercel.app as a generic phishing threat actively impersonating Instagram. The domain is hosted on Vercel and resolves to IP address 64.29.17.195. This fraudulent login page is designed to steal user credentials by mimicking the legitimate Instagram interface. According to VirusTotal, 22 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist. Google Safe Browsing has confirmed it as a phishing site, and the SSL certificate issued by Google Trust Services provides a false sense of security.

The domain remains active and accessible, posing an ongoing risk to users who may be tricked into entering their Instagram login details. The phishing page uses the title "Instagram" to deceive visitors. While no specific drainer kit has been identified, the site's primary objective is credential harvesting. PhishDestroy recommends that users avoid interacting with this domain entirely.

Current response actions include monitoring the domain for further activity. However, since it is hosted on Vercel, takedown may require coordination with the platform. Users who have already entered credentials should change their Instagram password immediately and enable two-factor authentication. For ongoing protection, always verify URLs before logging in and use PhishDestroy to check suspicious links.