Phishing detection: instagram-jordan-reallynguyen.vercel.app
Instagram Screenshot
Investigate
Domain
instagram-jordan-reallynguyen.vercel.app0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
64.29.17.67
ipinfo
Greynoise
URL
https://instagram-jordan-reallynguyen.vercel.app
Phishunt analysis Beta
47
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.9 Password field
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.6 Long domain
- +0.6 Login text in screenshot
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 Deep subdomain
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Instagram-branded page on a Vercel free-hosting subdomain with the brand in the hostname and page title. Google Safe Browsing lists it as social engineering, consistent with Instagram credential theft.
Brand in domain labelGoogle Safe BrowsingPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-09 · confidence 80%
Domain & Network
Whois
Registrar
Tucows Domains Inc
Network
IP
64.29.17.67
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
WR1
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists