ScanMalware.com

Security Scan Report: r.nl.framfot.se

Redirected to:
https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.insta...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/588e3fee-a7b9-4b38-9db5-31e764b03253Domain and IP registration (RDAP)/api/v1/rdap/588e3fee-a7b9-4b38-9db5-31e764b03253How often this domain was scanned/api/v1/domain/stats/r.nl.framfot.seScan history for this domain/api/v1/domain/history/r.nl.framfot.se?limit=15
This website contacted 19 IPs in 3 countries across 6 domains to perform 43 HTTP transactions. The main domain is instagram.com.

Submitted URL: https://r.nl.framfot.se/mk/cl/f/sh/WCPzyXJTZ6vPit8jzrZtzI4s6GpZ9Zju/bdYEj3EbjEoJ

Effective URL:
https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.insta...
Redirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Phishing page impersonating Instagram on an unranked, likely new domain – high risk.

Risk Factors (5)
Brand impersonation (Instagram) on a non‑official, unranked domain
Credential harvesting form on suspicious domain
Suspicious redirect from unknown subdomain to Instagram login
Lack of domain age information suggesting a new domain
Unranked domain status in Cisco Umbrella
Domain age information unavailable

Details

Page Title

Login • Instagram

Scan Type

public

Domain Name Analysis

The domain 'r.nl.framfot.se' uses the Swedish country-code top-level domain (.se), featuring subdomain 'r.nl'. The core label 'framfot' covers 7 characters containing 2 vowels alongside 5 consonants. Breaking it apart gives three words: f, ram, fot. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Allow the use’ of cookies from: Instagram for people who have an accout + Essential cooides’ These cookies are required to use Meta Products and! <are.nesenscansfot.eusites.to.uinil aR intenciad. y...

Page Load Overview

0.98s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,175 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network68% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
68%
technology software
35%
blog personal website
34%
news media journalism
34%
adult content
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24157.240.0.63Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
14157.240.0.174Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
2141.101.90.104United States
AS13335CLOUDFLARENET
22a06:98c1:3200::90:82United States
AS13335CLOUDFLARENET
22a03:2880:f277:1e8:face:b00c:0:4420Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
2141.101.90.105United States
AS13335CLOUDFLARENET
2141.101.90.106United States
AS13335CLOUDFLARENET
22a06:98c1:3200::90:83United States
AS13335CLOUDFLARENET
22a06:98c1:3200::90:81United States
AS13335CLOUDFLARENET
22a03:2880:f177:185:face:b00c:0:25deFrankfurt am Main, Hesse, Germany
AS32934FACEBOOK
4319--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:007c7e7e7e7e7c00
Perceptual Hash:806d2f923f63d13c
Difference Hash:0dccccccdcc8cc0d
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data