insta-clone-inky[.]vercel[.]app

This domain, insta-clone-inky.vercel.app, is currently active and classified as a high-risk brand impersonation threat targeting Instagram users. Analysis confirms the site is designed to harvest login credentials through deceptive login interfaces, presenting itself as 'Instagram 2.0' to exploit user trust in the legitimate platform. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain is flagged by 20 of 95 security vendors on VirusTotal, appears on one security blocklist, and is registered through Tucows Domains Inc. It resolves to IP address 216.198.79.67, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), and the domain was created on February 21, 2026, with an anomalous future registration date suggesting potential domain spoofing techniques. The page title explicitly reads 'Instagram 2.0,' further confirming its impersonation intent. Current status remains active, posing ongoing risk to users. Immediate mitigation is recommended: network administrators should block the domain and IP address at firewall level, while users should avoid interaction entirely. Organizations should monitor for credential reuse attempts from harvested accounts, particularly those with access to sensitive systems. The anomalous 2026 creation date warrants additional scrutiny of registrar records for potential fraudulent registration practices.