instagram-2-blond.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of instagram-2-blond.vercel.app
This domain appears to host a web application presented as an "Instagram Clone 2.0." Based on the page title, screenshot, and URL structure, it may be a demo or imitation of a social-media interface rather than an official service. The page layout resembles a photo-sharing feed with stories, posts, and a sign-in option, suggesting functionality modeled after a well-known social networking platform.
The site is served from a vercel.app subdomain, which commonly indicates deployment through a cloud application hosting platform rather than a standalone branded website. No clear operator identity is visible in the provided scan data, and the domain name itself includes the word "instagram," which may indicate an attempt to mimic or reference that brand rather than operate as an independent social platform.
Safety Assessment for instagram-2-blond.vercel.app
The scan results raise substantial concerns at the time of this scan. The domain was flagged by 14 out of 91 security engines, with multiple detections classifying it as phishing or otherwise malicious. In addition, the domain name and page presentation closely resemble Instagram branding, while the site is hosted on a third-party subdomain rather than an official brand-owned domain. That combination may indicate a look-alike page intended to imitate a familiar social-media service.
At the same time, the malware file scan did not identify malicious files in the sampled content, and major content-focused threat databases in the provided data did not report active listings at the time of this scan. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still worth noting. Given the multi-engine phishing consensus and the brand-resembling presentation, these cleaner signals do not outweigh the broader concerns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown as 2026-09-26. It is hosted on Vercel infrastructure and resolves to IP address 216.198.79.3, with nameservers under vercel-dns-3.com. DNSSEC appears to be unsigned.
From a technical standpoint, the page appears to be a modern JavaScript application, likely built with Next.js, based on the referenced _next/static assets and image routes. While the HTTPS configuration appears present, a valid certificate should not be treated as proof of legitimacy; phishing pages commonly use standard TLS as well. The main concern here appears to stem from reputation and impersonation-style indicators rather than embedded malware in the scanned files.
Share your experience with this website. Was it safe? Did you encounter any issues?