www.instagram.com - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned www.instagram.com and returned a benign verdict (score 0). The page resolved to 157.240.8.174 on Facebook, Inc. in AU. The domain was registered 8112 days ago through RegistrarSafe, LLC. 2 domains and 2 IPs were contacted, over 6 HTTP requests. 36 malware samples communicate with this URL (Fromcharcode). The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

• Verdict: benign (score 0) · Confidence 11%
• Scanned URL: http://big-blue-bus.com/pics/fotos/1/file/76260116961.pdf
• Domain: www.instagram.com · IP: 157.240.8.174 · AS32934 · AU
• Page title: Instagram
• HTTP status: 404 · text/html; charset="utf-8"
• Registrar: RegistrarSafe, LLC · domain age 8112 days · created 2004-06-04
• TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Aug 27 23: · subject C=US, ST=California, L=Menlo Park, O=Meta Platforms, Inc., CN=*.www.instagram.com
• Evidenced operator: Meta Platforms, Inc.
• HTTP requests captured: 6
• Scan tier: standard · observed 2026-08-21 00:56:04 UTC

Redirect chain

1. http://big-blue-bus.com/pics/fotos/1/file/76260116961.pdf
2. https://www.instagram.com/christian.reeb//pics/fotos/1/file/76260116961.pdf

Malware communicating with this URL (36)

These samples were observed contacting or being served from www.instagram.com. Each links to its full analysis.

• Fromcharcode - referenced · 05c06067501ee8d6deeb80a58ef04885 · first seen 2026-08-20
• ef4daa063f78b2ffcae16a7f01dd0506b58d1c8c76118c13beabe773f2f8f0d5 - referenced · ef4daa063f78b2ffcae16a7f01dd0506 · first seen 2026-08-20
• 63b5c39c8d25d7adf702d78d31ea768097967eec978db3a8f1a77d141383fd72 - referenced · 63b5c39c8d25d7adf702d78d31ea7680 · first seen 2026-08-20
• 29801844242682134cdbe875d3caf647c4a752e833e0993d3f6c3a748566ab39 - referenced · 29801844242682134cdbe875d3caf647 · first seen 2026-08-20
• 5eb6f3d81081997ecb17f86f50073304fee03c9eb2ccd0ae5fc113abad0233e0 - referenced · 5eb6f3d81081997ecb17f86f50073304 · first seen 2026-08-20
• 3e45dd6f1e5cd1cebed108e753617320eef7f051f37ee33c6b166719088a1b6a - referenced · 3e45dd6f1e5cd1cebed108e753617320 · first seen 2026-08-19
• fbevents.js - referenced · 5d8d4bb1186f740b55e9d632b68acc0b · first seen 2026-08-19
• d09d1513d4697e5c1a1d5b197e0b9e7df6b03e0ce3e0ae9d7e4d689a5d479c37 - referenced · d09d1513d4697e5c1a1d5b197e0b9e7d · first seen 2026-08-19
• e713bf20c3287d2225e86fa544195eb8c22709c8db1f96ded8b52f570134ed9c - referenced · e713bf20c3287d2225e86fa544195eb8 · first seen 2026-08-19
• 30b343c7bb1167b2cf2b47e7d8165bf7d575df293fc532c7228b2a8abd34d382 - referenced · 30b343c7bb1167b2cf2b47e7d8165bf7 · first seen 2026-08-19
• dd8c3c9a8bc6e01a4da5524caf6ef57ef3091baa8014ee5bdf7e766e0348c2ab - referenced · dd8c3c9a8bc6e01a4da5524caf6ef57e · first seen 2026-08-17
• 9fff1a774a85a191dd95c19f580cb9c108a3b15f35b81ca6026a59449a74f33f - referenced · 9fff1a774a85a191dd95c19f580cb9c1 · first seen 2026-08-17
• c784eeea9a0a5ecb90039885358e4119e68abbda6593743152433e67db81051e - referenced · c784eeea9a0a5ecb90039885358e4119 · first seen 2026-08-16
• 26bdfef1eb14e1cf9759db00a65a1844542d3d2387e89eb52d7898fb5d72744b - referenced · 26bdfef1eb14e1cf9759db00a65a1844 · first seen 2026-08-16
• 78836e06e64fb9fd787a16bc263f0d2460531a53adc4720e493ff23c423bbcdf - referenced · 78836e06e64fb9fd787a16bc263f0d24 · first seen 2026-08-16

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

• Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

• 157.240.8.174 - AS32934 Facebook, Inc. (Australia)
• 217.160.0.50 - AS8560 IONOS SE (Germany)

Observed indicators

• www.instagram.com
• static.cdninstagram.com
• 157.240.8.174
• 217.160.0.50
• https://www.instagram.com/christian.reeb//pics/fotos/1/file/76260116961.pdf
• https://static.cdninstagram.com/rsrc.php/yr/r/rzWiSjZRxk5.webp
• https://static.cdninstagram.com/rsrc.php/yj/r/f01UdNyJjJj.webp
• https://static.cdninstagram.com/rsrc.php/yL/r/mMvhX4currF.webp
• https://static.cdninstagram.com/rsrc.php/yY/r/5OCV_xUyQ5h.webp
• https://static.cdninstagram.com/rsrc.php/y9/r/MptwNl-B2pS.webp
• https://static.cdninstagram.com/rsrc.php/yw/r/icwX0xAk0pz.webp
• https://static.cdninstagram.com/rsrc.php/y4/r/QaBlI0OZiks.ico
• https://static.cdninstagram.com/rsrc.php/v5/y4/l/0,cross/-mqspJ4tqQQVP_U-H838XWcdN8w6PDpJSs97xFZK--hBruhBENOpKm_.css
• https://static.cdninstagram.com/rsrc.php/v4/yD/r/U6Zz-7turp8.js
• https://static.cdninstagram.com/rsrc.php/v4iPuv4/y8/l/en_US/sbLvz_mEt3WMS9wb83WV1uQsjlmiPUuRg7_dkF95-dqmhvna0A9MBUIlEqHd5u7JNcXiLxM0IL6HmaA0y63ysw4L1gBIPKkNJjlvT3eCpmBZ4R6PKzAallKXHIca9VG-NTJn.js
• https://static.cdninstagram.com/rsrc.php/v4iY4K4/yd/l/en_US/P74A6c4gzEC3MY3DZc3pKacweh9anlL9lQX0axcS52ZCUzUk6oE_noatXQjfua0sy1LZiVoJ_m6Xtb7-ua_hnEvu6B6ExCw3duF0_uye9hpj8kC57z898iv26aQcDFONXV02DNZEbAnTtzkJbiqiz2HoRoXAqzp11_JpCQ7FoQTcwzi8GSBvj8_FEnWr2sNhVUlJYOe0qnL2dG90HRtKQGwG0ihE-Qx8lcabVTDOwgx-s7CoHn42DHgaRwGYmJZCcc2ZP1Mqonn-JtdZ7PJAdmh5DEndjkKeHWrECl3_n2Jc9FVqcd252S-KrBJoNkaRTMCmH_u30a.js
• https://static.cdninstagram.com/rsrc.php/v4itK34/y_/l/en_US/a364Frzae8yUDEtOa0Hsm-mWMf_K9LVXoprCs80DeqxxhI5DSpP7JwLTcf-0O6cLbIhM_1psA_jVS.js
• https://static.cdninstagram.com/rsrc.php/v4iW5G4/yx/l/en_US/MsMPhweMgXv.js
• https://static.cdninstagram.com/rsrc.php/v5/yw/l/0,cross/fgQe914iiBfONMKn3YhINqU49pVNahkCk7_0U7gNXta8.css
• https://static.cdninstagram.com/rsrc.php/v4/yE/r/8meaxm5ZBwS.js

Other scans of www.instagram.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 24 Aug 2026 - unknown · https://www.lsv-wittlage.de/ckfinder/userfiles/files/rigefivijafiziw.pdf
• 24 Aug 2026 - unknown · https://www.lsv-wittlage.de/ckfinder/userfiles/files/rigefivijafiziw.pdf
• 24 Aug 2026 - unknown · http://www.nuricomuvakfi.org/wp-content/plugins/super-forms/uploads/php/files/4c35mk778f40i8dmtv3nkn
• 24 Aug 2026 - unknown · https://m-styleauto.com/js/upload/files/suxomajapako.pdf
• 24 Aug 2026 - unknown · https://alompar.hu/uploads/content_files/files/41377062345.pdf
• 24 Aug 2026 - unknown · https://www.le-nora.com/
• 24 Aug 2026 - unknown · https://alompar.hu/uploads/content_files/files/41377062345.pdf
• 24 Aug 2026 - unknown · https://www.kh.de/en/
• 24 Aug 2026 - suspicious · https://onlinebiblecollege.com/
• 24 Aug 2026 - unknown · https://gosia-colorist.com/

Questions about www.instagram.com

Is www.instagram.com safe?

The scan of www.instagram.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.

What malware is associated with www.instagram.com?

36 analysed samples communicate with this URL, including Fromcharcode.

How was www.instagram.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.instagram.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan