lnstagramcom572[.]github[.]io

PhishDestroy identifies lnstagramcom572.github.io as a HIGH-RISK brand impersonation domain engineered for credential theft and crypto drainer attacks. This site masquerades as Instagram to deceive users into surrendering login credentials or transferring cryptocurrency to attacker-controlled wallets. The domain is currently ACTIVE and employs evasion tactics to bypass security measures, making it dangerous for unsuspecting visitors.

Security intelligence confirms this domain exhibits multiple red flags. VirusTotal’s detection score stands at 18/95 security vendors, including classifications under SOCIAL_ENGINEERING by Google Safe Browsing. Hosted on GitHub Pages (IP 185.199.111.153), the domain leverages a Let’s Encrypt SSL certificate to appear legitimate. It is blocked by the OISD blocklist and appears on at least one additional security blocklist, indicating widespread recognition as a malicious entity. The use of a GitHub subdomain (github.io) further illustrates attackers’ preference for reputable services to host malicious infrastructure.

Users should immediately avoid interacting with lnstagramcom572.github.io to prevent credential compromise or unauthorized crypto transfers. If you accessed this domain, disconnect your device from the internet, scan for malware, and revoke any session tokens or API keys exposed to the site. Report this domain to your security team or platform abuse channels (e.g., GitHub, Instagram). Always verify URLs carefully and use bookmarks or official apps for login pages.