login-instagram-login[.]blogspot[.]com

The domain login-instagram-login.blogspot.com is identified as a credential phishing infrastructure targeting Instagram users. Registration data shows the domain was created through Google LLC, indicating use of a widely trusted registrar. Technical resolution points to the IP address 142.251.14.132, which belongs to Google’s hosting range, a common tactic to leverage reputable infrastructure and evade basic reputation checks. Nameserver information is unavailable (NS_NOT_FOUND), limiting deeper DNS‑level attribution.

The domain appears on one public blocklist and is actively blocked by the PhishDestroy service, confirming that at least one security provider has taken remediation action. Google Safe Browsing has flagged the URL for social engineering, reinforcing the phishing classification. VirusTotal analysis reports that 13 of 91 scanned security vendors have flagged the domain, providing a moderate consensus of malicious behavior. The overall status remains active as of the report date, July 29 2026.

Uncertainties include the lack of publicly disclosed SSL certificate details, HTTP response codes, and page‑title metadata, which prevents a fuller picture of the site’s content delivery mechanisms. Defenders should prioritize the domain for immediate blocking at network perimeter and endpoint security layers, incorporate the IP address 142.251.14.132 into threat‑intel feeds, and monitor for any associated subdomains or derivative URLs. Continuous re‑evaluation of VirusTotal and other sandbox feeds is advised to capture any escalation in detection counts or emergence of additional malicious indicators.