lm[.]instagram-f[.]com[.]cn

lm.instagram-f.com.cn is a subdomain of instagram-f.com.cn. PhishDestroy first observed the hostname on Sep 3, 2026. Current evidence score: 100/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, OpenPhish, Phishunt, Cloudflare Radar, and URLQuery. VirusTotal recorded 11 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, G-Data, Gridinsoft, Kaspersky, LevelBlue, Netcraft, OpenPhish, SOCRadar on Sep 3, 2026 at 04:25 UTC. OpenPhish and Phishunt listed the hostname in the separate external-blocklist snapshot on Sep 3, 2026 at 02:20 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: Google Safe Browsing returned no flag on Sep 3, 2026 at 04:28 UTC. URLScan captured the page on Sep 3, 2026 at 00:44 UTC.

The collector marked the hostname reachable on Sep 3, 2026 at 00:44 UTC, but did not retain the HTTP response code. Registration records for the registrable domain instagram-f.com.cn list Dynadot Inc as the registrar and Aug 27, 2026 as the creation date. Registration preceded first observation by 6 days. At collection time, the hostname resolved to 185.216.251.9 on AS135357 (HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED). The recorded endpoint location is Hong Kong, HK. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 25, 2026; checked Sep 3, 2026 at 01:02 UTC.

The record contains 5 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.