instagram-story-font-download[.]pages[.]dev

PhishDestroy flags instagram-story-font-download.pages.dev as a brand impersonation domain mimicking Instagram to distribute malicious payloads under the guise of font downloads. The site lures users seeking Instagram Story font generators, then exploits their trust to deliver crypto drainers or credential theft malware. Analysis places the immediate risk at 'under_investigation' while confirming active hosting and suspicious naming patterns aligned with Instagram-themed lures. This domain was registered via Cloudflare, Inc. using Google Trust Services for its SSL certificate. VirusTotal currently records 1/95 detections despite active abuse, resolving to IP 188.114.97.3. The domain leverages a pages.dev subdomain under Cloudflare’s Pages platform, a common tactic to evade traditional blocklists while maintaining reputable infrastructure associations. No current placement on major blocklists was observed at time of analysis, though detection rates remain critically low given the clear intent to deceive Instagram users. To mitigate risk, avoid downloading files or entering credentials on this domain. Users should verify font sources directly from official Instagram channels or trusted design platforms. Report the domain to PhishDestroy via the 'Report' link on any detection page. Security teams are advised to monitor 188.114.97.3 for associated malicious traffic and consider blocking the domain at the network level pending further investigation.