instagramhelp[.]whf[.]bz

On August 01, 2026 the domain instagramhelp.whf.bz was observed as an active generic phishing infrastructure. The authoritative name servers listed for the zone are free5.googiehost.com and free6.googiehost.com, which resolve the domain to the IPv4 address 69.164.250.130. The hosting appears to be unmanaged, with no additional public infrastructure details disclosed. The site is currently flagged by the PhishDestroy blocklist and is present on one additional security blocklist, indicating that at least two independent threat intelligence sources have categorized the host as malicious.

VirusTotal scans have recorded 21 detections out of 91 submitted security vendors, confirming that a notable proportion of AV engines recognize the domain as malicious. The high risk rating assigned to the domain aligns with the detection count and blocklist presence. No public SSL certificate information, HTTP response codes, or page title data have been released, leaving the exact content of the landing page unverified. Consequently, analysts cannot confirm the specific visual or functional characteristics of the site, only its classification as a generic phishing vector.

Defenders should block network traffic to 69.164.250.130 and add instagramhelp.whf.bz to domain deny lists. Monitoring of the associated name servers and the IP address for any changes is recommended, as well as periodic re‑scanning with VirusTotal or similar multi‑engine services to capture any evolution in detection rates. Organizations employing email filtering should continue to treat any communications referencing Instagram credentials as suspicious, given the domain’s confirmed phishing status.