instagrarnrnrnrn[.]netlify[.]app

The domain instagrarnrnrnrn.netlify.app is actively hosting a malicious payload classified as generic phishing. Infrastructure analysis shows the domain was provisioned through Netlify, a popular static‑site hosting provider, and currently resolves to the IPv4 address 63.176.8.218. The authoritative name server information is unavailable (NS_NOT_FOUND), which is a common tactic to hinder attribution. Google Safe Browsing has flagged the site for social engineering, indicating that the URL is being used to lure users into disclosing credentials or personal data.

Independent threat‑intel feeds confirm the site appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing the phishing assessment. VirusTotal scans report that 13 of 91 security vendors have identified the domain as malicious, providing a modest but consistent detection signal across multiple engines. The domain remains active as of the report date, August 02, 2026, and no evidence of remediation has been observed.

No page title, SSL certificate details, HTTP response codes, or additional brand targeting information have been publicly released, leaving those aspects of the site’s behavior unverified. Defenders should block resolution of 63.176.8.218 at the network perimeter, add instagrarnrnrnrn.netlify.app to local deny lists, and monitor Netlify‑hosted domains for similar patterns. Continuous re‑scanning of the URL through multi‑engine services is advised to capture any changes in detection status, and any user reports of credential capture attempts should be escalated to incident response teams for containment.