instgram-pist-muscle-ginxl9n.netlify.app

This website shows multiple indicators commonly associated with credential-harvesting pages. At the time of this scan, it was flagged by 14 out of 91 security engines, and a major threat database listed it for social-engineering activity. The domain also closely imitates the Instagram name while using a third-party hosting subdomain, and the screenshot shows a login form styled to look like Instagram rather than a clearly separate service. These are strong signs that the page may be attempting to impersonate a well-known platform.

The malware file scan did not detect malicious files at the time of analysis, but that does not offset the phishing-related signals. Phishing pages often contain little or no malware and instead rely on deceptive branding and fake login forms to capture usernames and passwords. In addition, the domain's IP address appears on one mail-reputation blocklist, which is a weaker signal on its own but still adds a small amount of caution.

Based on these findings, this website may pose potential risks to visitors.