Skip to content
Live
Low riskfirst seen 2 d ago

graph.instagram.com.bismillah.qzz.io

46of 100

Credential phishing, aimed at social media users. 97% likely a scam.

Copies InstagramHosted in United StatesOn qzz.io

Why it was flagged

How the score works
  • Name and certificate
  • Registration and DNS
  • VAKYN verdict
  1. legit domain "instagram.com" used as subdomain of "bismillah.qzz.io"+33
  2. same IP hosts 50 other flagged domain(s)+10
  3. user content on qzz.io+3

Evidence

Registration

not checked

Hosting

Country
United States
Network
CLOUDFLARENET
IP
188.114.96.8

DNS

A
188.114.96.8, 188.114.97.8
NS
luciana.ns.cloudflare.com, randall.ns.cloudflare.com
MX
none

Certificate

Issuer
Google Trust Services
Names
2
Seen
28 Oct 2026 21:22 UTC

VAKYN verdict

360 ms

Eight questions about the site, each with how sure the answer is.

  • Likely used for phishing or a scam?

    yes97% sure

    • yes97%
    • no3%
  • How dangerous for an ordinary visitor?

    Probably malicious49% sure

    • Probably malicious49%
    • Clearly malicious48%
    • Unclear2%
  • What is it most likely for?

    credential phishing58% sure

    • credential phishing58%
    • unclear11%
    • malware download10%
  • Which brand does it pretend to be?

    Instagram78% sure

    • instagram78%
    • none22%
  • Who is it aimed at?

    social media users76% sure

    • social media users76%
    • general public15%
    • developers3%
  • Would it ask visitors to sign in?

    no59% sure

    • yes41%
    • no59%
  • Would it ask visitors to pay?

    no63% sure

    • yes37%
    • no63%
  • Plausible innocent explanation?

    no98% sure

    • yes2%
    • no98%