instagram-gamma[.]vercel[.]app

Analysis of the domain instagram-gamma.vercel.app indicates a high‑risk brand‑impersonation campaign targeting Instagram. The domain was registered on 2026-06-01 through Vercel Inc. and resolves to IP 216.198.79.67, which belongs to AS16509 Amazon.com, Inc. and is geolocated in the United States. The site presents a valid SSL certificate issued by Google Trust Services (WR1) and serves HTTP 200 responses with HSTS enabled, suggesting a fully functional web server. The page title returned is "Instagram", matching the declared brand target. VirusTotal reports 19 of 91 security vendors flagging the host, and the domain appears on a single public blocklist; PhishDestroy has already blocked it. Independent scoring from Gridinsoft gives a trust score of 0/100, reinforcing the malicious assessment. Nameserver information could not be retrieved, and no additional content analysis is available beyond the title. Defenders should add the IP address and domain to blocklists, enforce DNS filtering, and monitor for related Vercel‑hosted infrastructure. Ongoing observation is advised to detect any evolution of the payload or credential‑harvesting pages that may be deployed behind the current front‑end.