instagarm-follow[.]github[.]io

The domain instagarm-follow.github.io is currently active and classified as a high‑risk generic phishing site. Infrastructure analysis shows the domain resolves to IP address 185.199.108.153, which belongs to GitHub's hosting range, indicating the use of GitHub Pages for content delivery. The domain was registered through GitHub, Inc., and no custom nameserver information is available, suggesting reliance on GitHub's default DNS configuration. Google Safe Browsing has flagged the domain for "SOCIAL_ENGINEERING," consistent with the generic phishing designation. VirusTotal reports that 15 of 91 security vendors have flagged the domain, providing independent confirmation of malicious activity. While the available intelligence confirms the hosting environment and the presence of security detections, the specific content of the page has not been analyzed, leaving the exact phishing lure and target audience uncertain. Defenders should treat the domain as malicious: block it at network perimeters, include it in URL filtering and DNS sinkhole lists, and monitor for any related DNS queries or traffic. Ongoing observation for changes in page content or additional threat indicators is recommended to refine response actions.