Phishing detection: instagramx4.pages.dev

Instagram
https://instagramx4.pages.dev Access site
Screenshot
Screenshot of instagramx4.pages.dev
Investigate
Domain instagramx4.pages.dev1 CT host on apex
URL https://instagramx4.pages.dev
Cert Google Trust Services
Phishunt analysis Beta
28 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +5.1 urlscan.io
  • +3.7 Brand in domain label
  • +2.0 Young domain
  • +1.7 Shared IP cluster
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Brand in cert SAN
  • +0.6 Suspicious TLD
  • +0.4 Long domain
  • +0.3 Free CA
  • +0.1 Deep subdomain
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Instagram on a Cloudflare Pages subdomain, likely designed to harvest account credentials. The SSL certificate explicitly names the Instagram brand and the domain shares infrastructure with other phishing clusters, flagged malicious by URLScan.

urlscan.ioBrand in cert SANPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-24 · confidence 72%
Domain & Network
Whois
Registrar CloudFlare, Inc.
Network
Country United StatesUnited States
ASN AS13335
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
PaaS platform Cloudflare Pages
Registrar CloudFlare, Inc.

Tracked from 2026-08-24 04:16 UTC  ·  Last refreshed 2026-08-25 03:30 UTC