instgram-ginx-l9n.netlify.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of instgram-ginx-l9n.netlify.app
This domain appears to host a page designed to resemble Instagram's login interface. The page title is "Instagram," and the screenshot shows a French-language sign-in form with Instagram-style branding, a password-reset prompt, and a Meta footer, suggesting it is attempting to imitate the social media platform's account access page.
The domain itself, instgram-ginx-l9n.netlify.app, is not an official Instagram domain and appears to be hosted as a subdomain on a static hosting platform. Based on the naming pattern and the visible content, the page may be intended to collect user credentials by presenting a look-alike login experience rather than providing an independent service of its own.
Safety Assessment for instgram-ginx-l9n.netlify.app
Multiple indicators suggest elevated risk at the time of this scan. The URL was flagged by 14 out of 91 security engines, with the detections broadly classifying it as phishing or otherwise malicious. In addition, a major threat database listed the page for social-engineering activity. Although the malware scan did not identify malicious files on the page itself, phishing pages often rely on deceptive forms and branding rather than downloadable malware.
The domain also closely resembles Instagram in name and presentation, which may indicate a look-alike page intended to imitate that brand. The screenshot shows a login form styled to match Instagram, while the domain is hosted under netlify.app rather than an official Instagram-owned domain. There is also a secondary caution signal because the domain's IP address is listed on one mail-reputation blocklist, though that signal alone is weaker than the phishing detections.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and the certificate appears valid until 2027-03-19. It is hosted on Netlify infrastructure backed by AWS EC2 in Frankfurt, Germany, using IP address 63.176.8.218. DNSSEC appears to be unsigned.
From a technical perspective, the presence of HTTPS should not be treated as proof of legitimacy, since deceptive pages commonly use valid certificates as well. The page references external resources including a script hosted on a GitHub Pages domain and links to legitimate Instagram account-recovery and signup pages, which may be used to make the imitation appear more convincing.
Share your experience with this website. Was it safe? Did you encounter any issues?