Phishing detection: instagram-accounts-login.duckdns.org
Instagram Screenshot
Investigate
Domain
instagram-accounts-login.duckdns.org0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
144.172.91.11
ipinfo
Greynoise
URL
http://instagram-accounts-login.duckdns.org
Phishunt analysis Beta
70
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +4.5 Brand in title
- +3.9 Password field
- +3.7 Brand in domain label
- +3.0 OpenPhish
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +1.0 Site cluster
- +0.8 Brand + login token
- +0.7 Brand in cert SAN
- +0.7 Bulletproof DNS
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 Deep subdomain
- Boosted to 45: Google-flagged credential form
- Boosted to 70: Credential + brand lookalike
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Instagram credential phishing page hosted on a free dynamic DNS domain. Includes a live password input field and is flagged as social engineering by Google Safe Browsing and confirmed by OpenPhish. Hosted at RouterHosting LLC in the US with no HSTS or CSP security headers.
Password fieldGoogle Safe BrowsingOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-31 · confidence 92%
Domain & Network
Whois
Registrar
Gandi SAS
Network
Country
United States
United States
Hosting
RouterHosting LLC
ASN
AS14956
TLS Cert
YE1
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists