instagramsnp.blogspot.com is currently identified as an active phishing domain based on its presence on a recognized security blocklist, specifically flagged by PhishDestroy as of July 30, 2026. The domain remains accessible and unresolved, with no evidence of remediation or takedown efforts at the time of analysis. Registration records confirm that the domain is managed through Google LLC, a legitimate registrar, but this does not mitigate the abuse risk presented by the site's current status. Network analysis shows the domain resolves to IP address 142.251.14.132, which is consistent with Google-hosted infrastructure. Nameserver records are unavailable, indicating NS_NOT_FOUND, which complicates further attribution and may reflect configuration issues or intentional obfuscation by the threat actor.
While a VirusTotal scan involving 91 vendors returned no positive detections, this absence does not constitute proof of safety. It is possible that the domain employs evasive techniques or is newly active, resulting in delayed detection across automated threat intelligence platforms. No additional evidence is available regarding site content, SSL usage, HTTP status, or trust scores, and the exact nature of the phishing activity has not been directly observed or classified beyond 'generic phishing.' The page title and brand targeting remain unanalysed, preventing more granular attribution or risk categorization.
Defenders are advised to treat instagramsnp.blogspot.com as a live threat due to its confirmed blocklist status and unresolved infrastructure, regardless of the current lack of automated detections. Continued monitoring and precautionary blocking are recommended, particularly given the domain's active status and potential for rapid deployment of phishing content. Further investigation into site content and associated infrastructure is necessary to clarify the scope and impact of the phishing campaign.