instagaonn[.]iceiy[.]com

instagaonn.iceiy.com is currently active and classified as a high‑risk generic phishing domain that facilitates account‑takeover attacks. The domain was created on 2020‑12‑06 and registered through Porkbun LLC. DNS resolution points to the IPv4 address 77.72.1.44, which is owned by AS12488 Krystal Hosting Ltd located in the United Kingdom. The authoritative name servers are ns1.byet.org, ns2.byet.org, ns3.byet.org, ns4.byet.org, and ns5.byet.org, and the domain publishes an MX record (priority 5) for mx.iceiy.com, indicating that it can receive email. An HTTP request returns status code 200 and the page title is “Domain Suspended,” a generic placeholder that may be used to hide malicious payloads.

TLS is enabled via a ZeroSSL ECC Domain Secure Site CA certificate, confirming encrypted transport but offering no credibility signal. Reputation data shows the domain appears on one public security blocklist and is explicitly blocked by PhishDestroy. The Gridinsoft trust score is 0 / 100, reflecting a complete lack of trust. VirusTotal analysis records 11 of 95 antivirus engines flagging the domain, providing independent vendor confirmation of malicious behavior.

No additional intelligence such as a phishing kit name or targeted brand is present in the current data set. Given the convergence of a zero trust score, multiple vendor detections, blocklist inclusion, and the account‑takeover scam type, security teams should treat any traffic to or from instagaonn.iceiy.com as hostile. Defensive recommendations include adding the domain and its resolved IP address to outbound and inbound web filtering policies, blocking the associated MX host mx.iceiy.com at the email gateway, and monitoring DNS queries for the domain and its Byet.org name‑server set for signs of rapid resolution changes. Continuous monitoring is advised because the site may alter its content or hosting arrangement, potentially affecting detection efficacy.