on.instagram-g.com.cn
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of on.instagram-g.com.cn
This website appears to present itself as an Instagram-related landing page in Chinese, promoting downloads and access to Instagram for desktop and mobile users. The page title and visible branding reference Instagram, and the content describes photo sharing, Reels, and global social interaction in a way that resembles an unofficial promotional or access portal for the social platform.
Based on the domain structure, this does not appear to be an official Instagram domain. Instead, it uses a subdomain format that incorporates the Instagram name within a different registered domain. The page also includes sections such as downloads, features, FAQs, and usage guidance, suggesting that it may be intended to attract users looking for Instagram access or software downloads in regions where access may be limited.
The site does not appear to represent an independent business or publisher with clearly identified ownership. From the available page content and domain naming pattern, it may be attempting to leverage the recognition of the Instagram brand to draw traffic.
Safety Assessment for on.instagram-g.com.cn
This domain raises significant concerns based on available scan data. At the time of this scan, it was flagged by 16 out of 91 security engines, with multiple detections describing phishing or other malicious behavior. The domain also closely resembles Instagram branding while using a different domain structure, which may indicate a look-alike site intended to imitate the well-known social media platform.
The page content appears to promote Instagram downloads and access, but the domain itself does not appear to be an official Instagram-owned address. In addition, the malware scan marked several site pages as suspicious and identified an externally referenced script as potentially malicious. While some blacklist databases focused on phishing and malware distribution did not list the domain at the time of this scan, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker but still cautionary signal.
Taken together, the combination of multi-engine phishing detections, brand-like presentation, suspicious file findings, and the non-official domain pattern suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2026-11-25. It appears to be served by nginx from an IP address geolocated to Hong Kong and hosted on generic hosting infrastructure. DNSSEC appears to be unsigned, which is common but provides no additional DNS integrity protection.
From a security perspective, the main concerns are not the TLS setup itself but the surrounding indicators: multiple flagged pages, a suspicious external JavaScript reference, lack of clear ownership signals, and a domain naming pattern that appears designed to resemble a major brand. The domain is also not ranked in major traffic listings based on the provided data, which may be consistent with a low-visibility or newly deployed site.
Share your experience with this website. Was it safe? Did you encounter any issues?