Phishing detection: v2238.ig-verifica.freemyip.com

Instagram
https://v2238.ig-verifica.freemyip.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Flegal%2Fcookies%2F&is_from_rle Access site
Screenshot
Screenshot of v2238.ig-verifica.freemyip.com
Investigate
Domain v2238.ig-verifica.freemyip.com3 CT hosts on apex
URL https://v2238.ig-verifica.freemyip.com/accounts/login/?next…
Phishunt analysis Beta
29 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +4.1 Site cluster
  • +3.4 Shared IP cluster
  • +3.2 Brand favicon
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.1 Cert reuse
  • +1.1 No CSP header
  • +0.9 Young certificate
  • +0.7 Brand in cert SAN
  • +0.7 Unrecognised DNS provider
  • +0.6 Brand impersonation in path
  • +0.6 Long domain
  • +0.6 Suspicious TLD
  • +0.4 Credential path
  • +0.3 Free CA
  • +0.3 Deep subdomain
  • +0.1 Hyphens
  • +0.1 External scripts
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Fake Instagram login page on a free dynamic-DNS subdomain that imitates an account verification flow. The path mimics Instagram's real login URL to harvest credentials. It is hosted on IONOS in Germany and OpenPhish lists it.

Credential pathBrand impersonation in pathOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-25 · confidence 80%
Domain & Network
Whois
Network
Country GermanyGermany
Hosting IONOS SE
ASN AS8560
TLS Cert YE2
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Registrar Amazon Registrar, Inc.

Tracked from 2026-10-25 13:02 UTC  ·  Last refreshed 2026-10-25 17:30 UTC