instagram-users[.]blogspot[.]com

The domain instagram-users.blogspot.com is currently active and has been identified as a phishing host. Infrastructure analysis shows the domain resolves to the IP address 142.251.13.132, an address owned by Google, indicating that the site is hosted on Google’s Blogger platform. Registration data confirms the registrar as Google LLC, which aligns with the hosting provider. No nameserver information is available; the field reports NS_NOT_FOUND, suggesting that standard DNS delegation records could not be retrieved.

The domain appears on one known security blocklist and is actively blocked by PhishDestroy, reinforcing the suspicion of malicious use. VirusTotal scans have returned 11 positive detections out of 91 security vendors, providing further evidence that the domain is being used for phishing activities. Although the presence of the Google‑owned IP reduces the likelihood of a dedicated malicious infrastructure, the abuse of legitimate hosting services is a common tactic to evade detection.

No additional data such as SSL certificate details, HTTP response codes, page title, or content analysis is presently available, leaving the exact phishing vector and target brand unconfirmed. Defenders should treat the domain as high‑risk: implement URL filtering to block the domain, monitor DNS queries for resolutions to 142.251.13.132, and consider adding the domain to internal blocklists. Ongoing observation of any new intelligence, especially page content or credential‑stealing behavior, is recommended to refine response actions.