Scan report · about 1 month agoPublic

cm.instagram-g.com.cn

185.216.251.10AS135357 · HK

Suspicious: the page presents itself as Instagram and wears the brand's name in a host the brand does not own (instagram-g.com.cn)

Engine tags
Verdict

What happened

Step by step, from what the scanner recorded.
Load 5.0 s · 6 requests
01 · Visitor openscm.instagram-g.com.cn
02 · Page shown
Instagram网页版:隐私验证 · 消息同步 · 在线畅聊styled as Instagram · high
03 · OutcomeCredential phishingA login page wearing a brand it does not own.

Dangerous — confirmed threat

Automated

It presents itself as Instagram while being hosted somewhere Instagram does not own. It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first
SupportingBrand impersonation detected
Instagram · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

Infrastructure

IP
185.216.251.10PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED, HK · AS135357HK
TLS
CN=YR1, O=Let's Encrypt, C=US · expires Nov 25, 2026
Redirects
0 hops · / → /
10 malicious10 suspicious

Hashes & fingerprints

Page capture

Live

Title “Instagram网页版:隐私验证 · 消息同步 · 在线畅聊” · brand shown: Instagram (high)

Engines

8 · time to verdict

Page

HTTP
200 · Completed
Title
Instagram网页版:隐私验证 · 消息同步 · 在线畅聊
Load
4.95 s · 6 requests
Stack · 3HSTSNginxOpen Graph