Phishing detection: instagram-j088mh6ry-harsh3294.vercel.app
Instagram Investigate
Domain
instagram-j088mh6ry-harsh3294.vercel.app0 CT hosts on apex
IP
216.198.79.3
URL
http://instagram-j088mh6ry-harsh3294.vercel.app
Cert
WR1
Phishunt analysis Beta
35
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.0 Young domain
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.6 Long domain
- +0.6 Login text in screenshot
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Fake Instagram page deployed on a free Vercel subdomain with a random-looking project name containing the brand. Appears to collect Instagram login credentials. Flagged by OpenPhish and shares IP and certificate with other detections on the platform.
Brand in domain labelOpenPhishPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-14 · confidence 80%
Domain & Network
Whois
Registrar
Tucows Domains Inc
Network
IP
216.198.79.3
Country
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
WR1
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise