Security Scan Report: www.copy-instagram.vercel.app

Redirected to:
https://copy-instagram.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.copy-instagram.vercel.app/

Effective URL:
https://copy-instagram.vercel.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Instagram login on a vercel.app subdomain harvesting email and password, with a disguised password field and unicode evasion — a credential phishing page impersonating Instagram.

Risk Factors (5)
Impersonation of Instagram's login interface on a non-official domain
Credential harvesting form (email + password) served from an attacker-chosen subdomain
Disguised password field (text input with password placeholder) indicating deliberate evasion
Unicode/character-confusion evasion in form fields
Typosquat-style deceptive hostname 'copy-instagram' on free hosting
Domain age information unavailable

Details

Page Title

INSTAGRAM

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.copy-instagram.vercel.app' on the application-focused generic top-level domain (.app) with subdomain 'www.copy-instagram'. Its registrable label 'vercel' stretches across 6 characters split between 2 vowels and 4 consonants. Breaking it apart gives 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Instagrom e-mail senha esqueceu sua senha? Acessar

Page Load Overview

0.81s
Total Load Time
64 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:37 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network79% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
79%
government public service
52%
technology software
52%
phishing scam
50%
adult content
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
54--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180419BDA48A722866913E4601FB55B0442A6C003D30ED9847EED61CDCFCA28A6DE33D9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:E+Lp11iZ1onhAZ9QbSj9xODZlcglcC/iJm:9p1gZOnhAZeb06DZagaC/iJm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2268:AABAAKgAgCAAiAACCAABAAgBABAAQAAAAEEgUgAAhDEAMFAAAAAQgAIAAABAAYgAhEAAABASAAAAgAAAARBAABABREAAAgAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7dbe7ffe7ffff
Perceptual Hash:b3999b23cccc2699
Difference Hash:0c0c300c004c0000
Wavelet Hash:0f071f070f073333
Color Hash:N/A

Other Hashes

Crop Resistant:0c0c300c004c0000

Scan History

Scan history not available

Unable to load historical scan data