ScanMalware.com

Security Scan Report: r.nl.framfot.se

Redirected to: https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fframfot.se%2F%3Futm_source%3Dbrevo%26utm_campaign%3DS%2Bbygger%2Bdu%2Ben%2Blrande%2Borganisation%26utm_medium%3Demail&is_from_rle

Site favicon
Submitted: Dec 2, 2025, 9:05:59 AMCompleted: Dec 2, 2025, 9:06:43 AMpubliccompleted
Loading additional data...

Summary

This website contacted 19 IPs in 3 countries across 6 domains to perform 43 HTTP transactions. The main domain is instagram.com.

Submitted URL: https://r.nl.framfot.se/mk/cl/f/sh/WCPzyXJTZ6vPit8jzrZtzI4s6GpZ9Zju/bdYEj3EbjEoJ

Effective URL: https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fframfot.se%2F%3Futm_source%3Dbrevo%26utm_campaign%3DS%2Bbygger%2Bdu%2Ben%2Blrande%2Borganisation%26utm_medium%3Demail&is_from_rleRedirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Phishing page impersonating Instagram on an unranked, likely new domain – high risk.

Risk Factors
Brand impersonation (Instagram) on a non‑official, unranked domain
Credential harvesting form on suspicious domain
Suspicious redirect from unknown subdomain to Instagram login
Lack of domain age information suggesting a new domain
Unranked domain status in Cisco Umbrella
Domain age information unavailable

Details

Page Title

Login • Instagram

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(68%)

Domain Information

The domain 'r.nl.framfot.se' uses the Swedish country-code top-level domain (.se), featuring subdomain 'r.nl'. The core label 'framfot' covers 7 characters containing 2 vowels alongside 5 consonants. Breaking it apart gives three words: f, ram, fot. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://r.nl.framfot.se/mk/cl/f/sh/WCPzyXJTZ6vPit8jzrZtzI4s6GpZ9Zju/bdYEj3EbjEoJ

Page Load Overview

0.98s
Total Load Time
43
HTTP Requests
6
Domains
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,175 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network68% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
68%
technology software
35%
blog personal website
34%
news media journalism
34%
adult content
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24157.240.0.63Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
14157.240.0.174Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
2141.101.90.104United States
AS13335CLOUDFLARENET
22a06:98c1:3200::90:82United States
AS13335CLOUDFLARENET
22a03:2880:f277:1e8:face:b00c:0:4420Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
2141.101.90.105United States
AS13335CLOUDFLARENET
2141.101.90.106United States
AS13335CLOUDFLARENET
22a06:98c1:3200::90:83United States
AS13335CLOUDFLARENET
22a06:98c1:3200::90:81United States
AS13335CLOUDFLARENET
22a03:2880:f177:185:face:b00c:0:25deFrankfurt am Main, Hesse, Germany
AS32934FACEBOOK
4319--

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data