followers-increase-instagram[.]blogspot[.]com

The domain followers-increase-instagram.blogspot.com is flagged by multiple security sources as a high‑risk phishing vector. Google Safe Browsing classifies the site under the ‘social engineering’ category, indicating that the URL is used to lure victims into divulging credentials or personal data. VirusTotal analysis shows that 11 out of 91 scanned scanners have raised detections, confirming malicious behavior despite a modest detection count. The domain appears on one public blocklist and is actively blocked by the PhishDestroy filter, reinforcing the consensus that it should be treated as hostile.

Infrastructure analysis reveals that the sub‑domain resolves to IP address 142.251.13.132, an address owned by Google LLC and associated with the Blogspot hosting platform. The registrar information confirms that the domain was provisioned through Google LLC, implying that the malicious page is hosted on a legitimate content‑delivery service, a common tactic to evade reputation checks. No nameserver records are available (NS_NOT_FOUND), and no SSL/TLS certificate details have been reported, limiting further verification of transport security. Because the site is still listed as active, defenders should assume the phishing campaign remains operational.

Recommended mitigations include adding the full sub‑domain to network and endpoint blocklists, enforcing URL filtering based on the Google Safe Browsing API, and monitoring DNS queries for the associated IP. Organizations using email or social‑media login flows should educate users about unsolicited requests for Instagram growth services, as the domain name suggests a lure targeting platform users. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are advised to capture any changes in detection coverage.