instagram-clone-login.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of instagram-clone-login.vercel.app
This domain appears to host a web page designed to imitate Instagram's login interface. The page title is "Instagram," and the screenshot shows Instagram branding, a username/email and password form, mobile app badges, and a Facebook login prompt, all presented in a way that resembles the legitimate social media platform.
Based on the domain name, this does not appear to be an official Instagram-owned domain. Instead, it appears to be a custom page deployed on a cloud hosting subdomain. The inclusion of "instagram-clone-login" in the hostname strongly suggests that the page was created as a clone or replica of Instagram's sign-in screen rather than as an independent social platform or legitimate corporate property.
The page also appears to be in Portuguese, which may indicate targeting of Portuguese-speaking users. No evidence in the provided scan data suggests operation by Meta or Instagram's official infrastructure; based on available data, it appears to be an unofficial look-alike login page.
Safety Assessment for instagram-clone-login.vercel.app
Multiple risk indicators are present in this scan. At the time of this scan, the domain was flagged by 23 out of 91 security engines, with many classifying it as phishing or malicious. In addition, a major threat database listed the URL for social-engineering activity. Although one malware scan reported no flagged files, that result does not outweigh the broader multi-engine phishing consensus.
The page content itself raises substantial concern. The domain closely resembles an Instagram-themed login page while being hosted on a third-party subdomain rather than an official Instagram domain. The screenshot shows branding and a credential form that may be intended to collect usernames, email addresses, and passwords from visitors who believe they are signing in to the real service.
There is also a secondary reputation signal: the domain's IP address is listed on one mail-reputation blocklist, though that alone is weaker evidence than the phishing detections and social-engineering listing. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.3 in the United States. It presents a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry in 2026-07-27. The presence of HTTPS indicates encrypted transport, but it should not be interpreted as proof of legitimacy.
DNSSEC appears to be unsigned, and the domain uses Vercel-managed nameservers. The page is relatively simple from a technical standpoint, with a small number of scanned files and external references, including static assets and common stylesheet libraries. The main technical concern is not server misconfiguration but the apparent use of a hosted landing page that imitates a well-known login experience.
Share your experience with this website. Was it safe? Did you encounter any issues?