instagram-grid-planner[.]pages[.]dev

PhishDestroy identifies instagram-grid-planner.pages.dev as an active phishing site impersonating Instagram’s official grid-planning tool. The domain is currently categorized under generic_phishing and remains active as of today. Threat actors leverage the legitimate Cloudflare Pages platform to host fraudulent login pages, deceiving users into surrendering credentials under the guise of planning Instagram grids. The campaign specifically targets users seeking third-party planning utilities, exploiting trust in Cloudflare-hosted subdomains to evade initial detection.

This domain resolves to IP 188.114.97.3 and is protected by an SSL certificate issued by Google Trust Services. As of the latest scan, instagram-grid-planner.pages.dev shows 0 detections out of 95 VirusTotal vendors, indicating it has not yet been widely blacklisted. Registered through Cloudflare, Inc., this domain was created recently and has no prior reputation within threat intelligence platforms. The absence of third-party blocklist entries and low VT coverage suggests this campaign is either newly deployed or intentionally designed to fly under the radar using Cloudflare’s trusted infrastructure.

The current status of instagram-grid-planner.pages.dev remains active, with no sign of takedown. Users are strongly advised to avoid accessing the site or entering any login credentials. To mitigate risk, block the domain at the network level using IP 188.114.97.3 and domain instagram-grid-planner.pages.dev. If credentials were entered, immediately reset passwords and enable multi-factor authentication on all associated accounts. Report the domain to Instagram and Cloudflare for abuse investigation to accelerate remediation.