instagram.webpromotion-business.site
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of instagram.webpromotion-business.site
The domain instagram.webpromotion-business.site appears to host a login page styled to resemble an Instagram-related sign-in experience. The page title is "Instagram," and the screenshot shows a simple email-and-password form with a "Forgot your password?" link, suggesting that the site is attempting to collect account credentials rather than provide original content or a broader service.
Based on the domain structure, this does not appear to be an official Instagram-owned domain. Instead, it is hosted under the broader webpromotion-business.site domain, which may indicate a third-party subdomain setup. Multiple web-classification sources categorize it in phishing and fraud-related categories, while one generic classifier labels it as technology, so the available data more strongly suggests a credential-focused imitation page than a legitimate social media service.
Safety Assessment for instagram.webpromotion-business.site
This domain was flagged by 10 out of 91 security engines at the time of this scan, with detections broadly describing phishing, fraud, or malicious activity. The page content also raises concern because it presents itself as "Instagram" while using a different domain name, which may indicate an attempt to imitate a well-known platform and capture user login details. That mismatch between branding and domain identity is a common warning sign in credential-harvesting campaigns.
Blacklist and threat-database checks were mixed at the time of review. Several major content-focused threat databases did not list the domain, and the malware scan did not detect malicious files in the small set of scanned resources. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. In context, the stronger indicators are the multi-engine phishing detections and the apparent imitation of a major social platform's login page.
Based on these findings, this website may pose potential risks to visitors, particularly anyone entering account credentials or personal information.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served over HTTPS from an nginx web server hosted on IP address 162.43.122.184 in Japan. The domain is a little over two years old, uses XServer nameservers, and its DNSSEC status is unsigned. A valid certificate helps encrypt traffic in transit, but it does not by itself confirm legitimacy.
From a technical perspective, the scan did not identify malicious files among the four resources examined, and no flagged external links or iframes were reported. Even so, the combination of a branded login page on a non-official domain and multiple phishing detections is a more significant concern than the clean file scan alone.
Share your experience with this website. Was it safe? Did you encounter any issues?