Phishing sites impersonating Instagram

PhishDestroy has recorded 662 phishing domains impersonating Instagram since 2025-07-18, 25 of them in the last 30 days. The most used registrars are GitHub and Vercel; the most common TLDs are .com and .app. The official Instagram domain is instagram.com: any other site asking for your login or wallet is not Instagram.

662
Domains, all time
25
Last 30 days
335
Online at last check
72
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 12026-07-26: 52026-07-27: 172026-07-28: 12026-07-29: 32026-07-30: 112026-07-31: 02026-08-01: 22026-08-02: 82026-08-03: 22026-08-04: 12026-08-05: 12026-08-06: 52026-08-07: 32026-08-08: 82026-08-09: 32026-08-10: 42026-08-11: 32026-08-12: 12026-08-13: 42026-08-14: 72026-08-15: 42026-08-16: 32026-08-17: 12026-08-18: 22026-08-19: 02026-08-20: 72026-08-21: 22026-08-22: 02026-08-23: 22026-08-24: 12026-08-25: 02026-08-26: 52026-08-27: 02026-08-28: 22026-08-29: 02026-08-30: 12026-08-31: 102026-09-01: 02026-09-02: 22026-09-03: 142026-09-04: 22026-09-05: 42026-09-06: 82026-09-07: 52026-09-08: 32026-09-09: 32026-09-10: 12026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 12026-09-15: 02026-09-16: 02026-09-17: 22026-09-18: 02026-09-19: 02026-09-20: 22026-09-21: 22026-09-22: 02026-09-23: 12026-09-24: 12026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 12026-10-04: 12026-10-05: 02026-10-06: 22026-10-07: 12026-10-08: 42026-10-09: 02026-10-10: 42026-10-11: 32026-10-12: 22026-10-13: 02026-10-14: 02026-10-15: 22026-10-16: 22026-10-17: 02026-10-18: 12026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Instagram phishing domains detected per day: 204 from 2026-07-25 to 2026-10-22; peak 17.

How to tell a fake Instagram site

Official domain: instagram.com.

Words most often added to the brand in reported domains: clone, login, insta, one, airdropsalert, three, page, instagramlogin, instagramfollowers, eight.

  • Type the address yourself or use a bookmark; phishing links for Instagram arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Instagram does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Instagram phishing domains

The 50 most recently detected domains impersonating Instagram
DomainFirst detectedStatus at last checkRegistrar
radicas.it2026-10-18OnlineAruba s.p.a
minhon.pt2026-10-16Online—
instanderhub.com2026-10-16OnlinePorkbun
instander.vip2026-10-15OnlinePorkbun
aeroinstaapk.com2026-10-15OnlineGransy, s.r.o
modernfruits.com2026-10-12OnlineGabia
riiibx.site2026-10-12OfflineNameCheap
athinsaat.com2026-10-11OnlineTUCOWS.COM
crossfitheimdall.com2026-10-11OnlineOVH
baliessentialproperties.com2026-10-11OnlineHOSTINGER operations
hokkori-hyoutanjima.com2026-10-10OnlineXServer
baleafactive.shop2026-10-10OnlineDynadot
jeanphil.vip2026-10-10OnlineNICENIC
instasklad.com2026-10-10OfflineRegistrar of Domain Names REG.RU
instagram.rents.ac2026-10-08OnlineNAMECHEAP
conglolife.com2026-10-08OnlinePublicDomainRegistry.com
lespetitsplatsdetina.com2026-10-08OnlineInfomaniak Network
ideiaambiental.org.br2026-10-08Online—
instaaswap.com2026-10-07OfflineNICENIC
saque-instagram.com2026-10-06OnlineName.com
premio-instagram.com2026-10-06OnlineName.com
pacar.robertmotherwell.com2026-10-04OnlineDynadot
instagram-my.ru2026-10-03OnlineREGRU-RU
whatsappdwar.com2026-09-24OnlineGoDaddy.com
dunia.chiquidiomas.com2026-09-23OnlineDynadot
nmpo4recuid.com2026-09-21OfflineNAMECHEAP
agenciaeletravel.com2026-09-21OnlineDonDominio (SCIP)
dunia.goodluckinvestment.com2026-09-20OfflineGname.com
instagram-visualizza-post.info2026-09-20UnknownNICENIC
insta-clone-mauve.vercel.app2026-09-17OfflineVercel
mancingmania.evvira.com2026-09-17OnlineDynadot
instagram-one-alpha.vercel.app2026-09-14OnlineVercel
impoclub.com2026-09-10OnlineGoDaddy.com
dikmentekstil.com2026-09-09OnlineNics Telekomunikasyon A.S
siddhdharod.github.io2026-09-09OfflineGitHub
ww547.imgtaram.com2026-09-09OnlineNameSilo
ducastudio.com2026-09-08OnlineIONOS SE
harshlime.github.io2026-09-08OnlineGitHub
instagram-clone-v10.vercel.app2026-09-08OnlineVercel
eh-md.com2026-09-07OnlineENOM
shootradar.app2026-09-07OnlinePorkbun
instatram.github.io2026-09-07OfflineGitHub
emersondasilva-dev.github.io2026-09-07OfflineGitHub
account-instagram.vercel.app2026-09-07OnlineVercel
cherinailsspa.live2026-09-06OnlineDynadot
instagram-reels-funny-every-viral-reels.github.io2026-09-06OfflineGitHub
hasyimf.github.io2026-09-06OfflineGitHub
etcher7.github.io2026-09-06OfflineGitHub
instagram-cyber.github.io2026-09-06OfflineGitHub
instagram-2-blond.vercel.app2026-09-06OnlineVercel

All 662 Instagram reports

Where they are registered and hosted

Registrars

  1. GitHub107
  2. Vercel75
  3. Google46
  4. Vercel45
  5. Cloudflare30
  6. Tucows Domains30
  7. Dynadot22
  8. NAMECHEAP20

Top-level domains

  1. .com225
  2. .app156
  3. .io115
  4. .dev16
  5. .org10
  6. .live10
  7. .online9
  8. .site9

Hosting networks

  1. Amazon.com, Inc.115
  2. Cloudflare, Inc.70
  3. Fastly, Inc.64
  4. CLOUDFLARENET, US59
  5. FASTLY - Fastly, Inc., US46
  6. Google LLC33
  7. AMAZON-02 - Amazon.com, Inc., US26
  8. GOOGLE - Google LLC, US25

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Instagram; share of all PhishDestroy reports: 0.29%.