Security Scan Report: anandanand39981-blip.github.io

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 5 HTTP transactions. The main domain is github.io and was registered 13 years ago.

Submitted URL: https://anandanand39981-blip.github.io/l_inshtagram/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed Instagram credential-phishing page on a github.io subdomain: copies Instagram's login UI, harvests username/password, and embeds a Telegram bot token to exfiltrate what it collects. Credentials entered here are stolen.

Risk Factors (6)
Brand impersonation of Instagram on a non-official domain
Credential-harvesting login form (password + username fields)
Telegram bot token in page script enabling exfiltration of collected data
Deceptive permission-request overlay ('Admin Settings', 'Allow All')
Free hosting subdomain with unknown creation date and no domain reputation
Sign-up link is a dead anchor ('#'), typical of copied phishing kit markup
Domain age information unavailable

Details

Page Title

Instagram

Scan Type

public

Domain Name Analysis

The domain name 'anandanand39981-blip.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'anandanand39981-blip'. Count 6 characters in 'github' split between 2 vowels and 4 consonants. Word splitting yields three words: g, it, hub. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Instagram Phone number, username, or email Password oR G Log in with Google New to Instagram? Sign up

Page Load Overview

0.40s
Total Load Time
26 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:312 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network91% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
91%
technology software
56%
documentation technical
43%
entertainment media
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5185.199.108.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0185.199.111.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
0172.67.216.92Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.250.154.94Google · CDNUnited States
AS15169Google LLC
0185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
56--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18852746769B704266A53E4753FF78B063560C003D545CD283EEC1694CF87EC5AAA3B9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ooIDmNi/Exnj4IYncHbIcm6/iN7lp+u9JU5qdYthjxO5w0x6yN6qrNNW:TIpVccJWMah66+6qG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14296:ZAgXOAQ4acOLCBAEigJxRwxAwlKgeKeEiJAqqQmACFY514QIAhDDUBCSBZMERgIMSBQGAIzJgcCQLnVIcFJGFQEECDgF444U

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7fffffe
Perceptual Hash:f7aadca87588d422
Difference Hash:0010284c4c300102
Wavelet Hash:fcfce4e4c0d0c0c0
Color Hash:N/A

Other Hashes

Crop Resistant:0010284c4c300102

Scan History

Scan history not available

Unable to load historical scan data