yassinebarouda0-blip[.]github[.]io

The domain yassinebarouda0-blip.github.io is identified as a high-risk generic phishing site targeting Instagram users. The domain mimics the official Instagram login page to deceive users into submitting their credentials. No specific drainer kit has been identified, but the site is designed to capture sensitive information such as usernames and passwords.

Technical indicators for yassinebarouda0-blip.github.io include a VirusTotal score of 2/95, indicating that while a minority of security vendors flag it, the domain still poses a significant threat. The domain is registered through GitHub, Inc., and its SSL certificate is provided by Let's Encrypt / R12. The domain resolves to the IP address 2606:50c0:8001::153, which is located in the United States and is part of the AS54113 Fastly, Inc. network. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The creation date of the domain is not specified, but it is currently active as of the latest analysis.

The domain is still active and poses a high risk to users who may inadvertently access it. Organizations and individuals are advised to block this domain at the network level and to educate users about the dangers of phishing attacks, particularly those mimicking well-known brands like Instagram. Despite the domain being flagged and blocked by some security vendors, it remains accessible, and users should remain vigilant and verify the URL and SSL certificate before entering any credentials.