instagram-login-authentication.duckdns.org
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of instagram-login-authentication.duckdns.org
This domain appears to be a subdomain hosted under DuckDNS, a dynamic DNS platform that lets users create custom hostnames pointing to changing IP addresses. Based on the domain string "instagram-login-authentication.duckdns.org," the page appears to present itself as something related to Instagram account access or sign-in verification rather than an independent brand or business website.
The naming pattern strongly suggests a login-themed page targeting users of a well-known social media platform. It does not appear to represent an official corporate domain for Instagram, and the available categorization data classifies it as phishing or fraud-related. Based on the scan context, this subdomain may have been set up to imitate an authentication workflow rather than provide a standalone legitimate service.
Safety Assessment for instagram-login-authentication.duckdns.org
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, and multiple web-classification providers categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong indicator of credential-harvesting or deceptive login behavior. The domain name closely resembles an Instagram login or authentication page and may be a look-alike intended to capture user credentials.
One malware page scan reported no flagged files, but that result does not outweigh the broader phishing-related detections. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds minor caution in context. Although the parent domain is old, this is a user-created subdomain on a dynamic DNS service, so the age of the base domain does not meaningfully reduce the phishing concern here. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site appears to have an invalid or missing SSL/TLS configuration, with no confirmed certificate details available at the time of this scan. That is a notable concern for any page that appears to request login or authentication details, because users may be unable to verify a secure encrypted connection.
The hostname resolves to an AWS EC2 IP address in Ashburn, United States, and uses DuckDNS nameservers. DNSSEC appears to be unsigned, and the web server software was not identified from the available data. No malicious files were flagged in the limited file scan, but the combination of dynamic DNS hosting, missing or invalid SSL, and strong phishing detections raises technical trust concerns.
Share your experience with this website. Was it safe? Did you encounter any issues?