insstagrram[.]github[.]io

The domain insstagrram.github.io has been identified as a high-risk generic phishing site that impersonates Instagram, and it remains active. Analysis indicates that the domain was created on May 07, 2026, and is registered through GitHub, Inc. It resolves to the IP address 185.199.108.153, which is located in the United States and is owned by GitHub, Inc. The domain is currently flagged by 23 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. It also appears on one security blocklist, specifically PhishDestroy, and holds an SSL certificate issued by Let's Encrypt R12.

Infrastructure analysis reveals that the domain insstagrram.github.io is hosted by GitHub, Inc., which may be leveraged to lend a false sense of legitimacy to the phishing attempt. The SSL certificate from Let's Encrypt R12 further complicates detection, as it can make the site appear secure to unsuspecting users. The domain's creation date of May 07, 2026, and its association with the IP address 185.199.108.153, suggest a recent and potentially targeted campaign. The current status of the domain being active and its presence on one security blocklist highlight the ongoing threat it poses.

Given the current active status of insstagrram.github.io and its high risk level, it is recommended that users do not interact with this domain and report any suspicious activity to their security teams. Network administrators should consider blocking this domain to prevent potential data breaches and credential theft. Continuous monitoring of the domain and associated IP addresses is advised to detect any further malicious activities or changes in the threat landscape.