instgram-post-muscl-ginxl9n.netlify.app
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of instgram-post-muscl-ginxl9n.netlify.app
This domain appears to host a page designed to resemble Instagram's login interface, including Instagram branding, a social-media themed page title, and links pointing to legitimate Instagram account signup and password reset pages. The screenshot shows a French-language sign-in form asking for a profile name, email, phone number, and password, which suggests the page is intended to collect account credentials rather than provide independent content or services.
Although the site is hosted on a Netlify subdomain rather than an official Instagram-owned domain, it presents itself in a way that may cause visitors to believe they are interacting with Instagram. Based on the domain naming pattern, page metadata, and visible layout, this appears to be a social-media look-alike page rather than an official Meta-operated property.
Safety Assessment for instgram-post-muscl-ginxl9n.netlify.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong indicator of credential-harvesting behavior. The page also visually imitates Instagram while using a non-official Netlify subdomain, which may increase the likelihood of user confusion.
The malware file scan did not detect malicious files in the sampled content, but that does not offset the phishing-related indicators. Phishing pages often rely on deceptive forms and branding rather than downloadable malware, so a clean file scan can coexist with meaningful account-theft risk. The domain's IP address also appears on one mail-reputation blocklist, though that signal is weaker than the phishing detections and social-engineering listing.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by DigiCert and is hosted through Netlify infrastructure backed by AWS EC2 in Frankfurt, Germany. Its domain age is relatively old for a hosted subdomain entry, but because this is a Netlify-hosted subdomain rather than a standalone brand-owned domain, age alone does not materially reduce concern. DNSSEC appears to be unsigned.
From a technical perspective, the main concern is not transport security but deceptive presentation: the page uses a trusted hosting platform and HTTPS while imitating a well-known social-media login page. This combination may make the page appear more convincing to users even though the branding and domain context do not appear to match an official Instagram login property.
Share your experience with this website. Was it safe? Did you encounter any issues?