Security Scan: Instagram

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fd273a76-0b27-41b8-bfca-95873522dd4c Domain and IP registration (RDAP)/api/v1/rdap/fd273a76-0b27-41b8-bfca-95873522dd4cHow often this domain was scanned/api/v1/domain/stats/igfun.vercel.app Scan history for this domain/api/v1/domain/history/igfun.vercel.app?limit=15

This website contacted 6 IPs in 3 countries across 5 domains to perform 7 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.igfun.vercel.app/

Effective URL:

https://igfun.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Fake Instagram login on igfun.vercel.app that harvests usernames and passwords and exfiltrates them to a Discord webhook; flagged by Safe Browsing for social engineering. Confirmed credential phishing.

Risk Factors (6)

Credential exfiltration to an external Discord webhook

Brand impersonation of Instagram on an unrelated, unranked hosting-platform subdomain

Google Safe Browsing social-engineering detection

Phishing reports against the primary domain in threat intelligence

Hosting-platform subdomain of unknown actual creation age

IDS alerts for actor-abused cloud hosting service (vercel.app) via DNS and TLS SNI

Domain age information unavailable

Details

Page Title

Instagram

Scan Type

public

Favicon Hash

MMH3: -2093582849

MD5: 75cf5724f59c9609ce7d0bde1d69349a

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'www.igfun.vercel.app' is registered; it also runs on subdomain 'www.igfun'. Its registrable label 'vercel' stretches across 6 characters containing 2 vowels alongside four consonants. It segments into two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.17s

Total Load Time

258 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

Text Length:159 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network89% confidence

Type: webapp

Method: ml+structural

All Detected Categories

social media network

89%

technology software

32%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	157.240.0.174Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	109.234.161.80	France	AS50474O2switch SAS
7	6	-	-