innstagramm[.]com

The domain innstagramm.com has been identified as an active phishing resource specializing in brand impersonation, specifically targeting Instagram. Analysis confirms the domain is currently operational, presenting a fabricated login interface designed to harvest user credentials under the guise of the legitimate social media platform. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on June 29, 2026, and resolves to the IP address 64.29.17.1. Detection metrics indicate the domain has been flagged by 10 of 95 security vendors on VirusTotal, reflecting an elevated risk profile. The SSL certificate is issued by Let's Encrypt, a common tactic observed in phishing campaigns to lend superficial legitimacy to fraudulent sites. The page title explicitly mirrors the targeted brand, further reinforcing the impersonation strategy. Current assessment categorizes this threat as elevated due to its active status and direct targeting of high-value credentials. Organizations and end-users are advised to implement immediate blocklisting of the domain and associated IP address. Network-level filtering should be enforced to prevent resolution of innstagramm.com, while endpoint protection systems should be updated to recognize and quarantine any related artifacts. Users who may have interacted with the domain are urged to reset credentials for the legitimate service and monitor accounts for unauthorized activity. Proactive threat hunting is recommended to identify any secondary infrastructure linked to this campaign.