Phishing detection: instagram.82.165.110.7.backname.io

Instagram
https://instagram.82.165.110.7.backname.io Access site
Screenshot
Screenshot of instagram.82.165.110.7.backname.io
Investigate
Domain instagram.82.165.110.7.backname.io
urlscan page.domain VirusTotal Whois
IP 82.165.110.7
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://instagram.82.165.110.7.backname.io
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
32 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +4.1 Brand in screenshot
  • +4.1 Site cluster
  • +3.2 Brand favicon
  • +3.0 OpenPhish
  • +2.6 Brand in subdomain
  • +2.2 Country mismatch
  • +2.0 Young domain
  • +1.7 Shared IP cluster
  • +1.1 No CSP header
  • +0.7 Unrecognised DNS provider
  • +0.6 Long domain
  • +0.6 Deep subdomain
  • +0.3 Suspicious TLD
  • +0.1 External scripts
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Instagram-branded lookalike hosted on a backname.io dynamic-DNS style host that embeds the server IP in the name, with the brand placed in the subdomain. Likely harvests Instagram login credentials. Hosted on IONOS in Germany and listed by OpenPhish.

Brand in subdomainOpenPhishKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-24 · confidence 80%
Domain & Network
Whois
Network
IP 82.165.110.7
Country GermanyGermany
Hosting IONOS SE
ASN AS8560
TLS Cert -
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-24 13:02 UTC  ·  Last refreshed 2026-10-24 23:30 UTC