Is instagram.dothome.co.kr safe?
http://instagram.dothome.co.kr/
Coveragecomplete4 of 4 applicable core capabilities
Fake Instagram login page hosted on a free Korean subdomain is a credential-harvesting phishing trap
This site at instagram.dothome.co.kr is not Instagram. It is a pixel-for-pixel clone of the Instagram login screen placed on a free hosting subdomain, built to capture the username and password you type. Thirteen security engines flag it as malicious and eleven antivirus families independently report it as a threat. The page shows the familiar phone/username/email and password fields with a Korean-language 'Log In' button, and every footer link points to the real Instagram or Meta properties, which is exactly how a phishing page borrows trust. Entering your credentials here sends them to whoever controls this subdomain, not to Meta.
Be the first to review instagram.dothome.co.kr
Lost money to instagram.dothome.co.kr? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
This site at instagram.dothome.co.kr is not Instagram. It is a pixel-for-pixel clone of the Instagram login screen placed on a free hosting subdomain, built to capture the username and password you type. Thirteen security engines flag it as malicious and eleven antivirus families independently report it as a threat. The page shows the familiar phone/username/email and password fields with a Korean-language 'Log In' button, and every footer link points to the real Instagram or Meta properties, which is exactly how a phishing page borrows trust. Entering your credentials here sends them to whoever controls this subdomain, not to Meta.
A login form that steals what you type
The captured page contains a username/email input and a password input, followed by a Korean-language 'Log In' button. The visual review confirms this is a standard Instagram login interface. On the real Instagram, those fields submit to Meta's servers. Here, they submit to a subdomain of dothome.co.kr, a free Korean web hosting service, which has no relationship with Instagram or Meta.
The page copies Instagram's full footer, including links to About, Blog, Jobs, Help, API, Privacy, Terms, Locations, Popular, Instagram Lite, Meta AI, Muse, Threads, and Contact Uploading. Those links all point to the genuine instagram.com, about.instagram.com, help.instagram.com, meta.ai, threads.com, facebook.com, and about.meta.com destinations. That is the deception: the surrounding chrome is real, but the login form is not.
Clean TLS and an old parent domain do not make this safe
The connection is encrypted and the parent domain dothome.co.kr is 8264 days old, but neither fact protects you. The encryption only means nobody can eavesdrop on the connection; it does not mean the site is honest. The old domain belongs to the free hosting provider, not to the phishing operator, who simply rented a subdomain. The browser threat feed returned no warning at the time of the check, but that is a snapshot, not a clean bill of health.
The independent threat intelligence is unambiguous. Thirteen engines out of ninety-three flagged this URL as malicious, with one additional suspicious verdict, and eleven separate antivirus families reported an adverse result. The page also lists no direct contact email, which is consistent with a throwaway phishing deployment rather than a legitimate service.
Why the score is 8
11 independent antivirus families reported an adverse result. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
14/ 93
detectionsFresh result
14 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 13
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| AutoShunMalicious | malicious |
| BitDefenderMalicious | phishing |
| CRDFMalicious | malicious |
| EmsisoftMalicious | phishing |
| ESETMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| KasperskyMalicious | phishing |
| LionicMalicious | phishing |
| NetcraftMalicious | malicious |
| SophosMalicious | phishing |
| WebrootMalicious | malicious |
| SOCRadarSuspicious | suspicious |
All 93 engine results
- alphaMountain.ai - phishing - Malicious
- AutoShun - Malicious
- BitDefender - phishing - Malicious
- CRDF - Malicious
- Emsisoft - phishing - Malicious
- ESET - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Kaspersky - phishing - Malicious
- Lionic - phishing - Malicious
- Netcraft - Malicious
- Sophos - phishing - Malicious
- Webroot - Malicious
- SOCRadar - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
The page displays a standard Instagram login interface, including fields for username/email and password, and a 'Log In' button, which is characteristic of a phishing page.
What the captured page showed
1 observation- 01
The page displays a standard Instagram login interface, including fields for username/email and password, and a 'Log In' button, which is characteristic of a phishing page.
03 · Investigation Story
Investigation story
What the site claims
Instagram
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Login Portal
Observed behavior
Evidence behind this classification
- 01The page contains a username/email field and a password field with a Korean 'Log In' button, visually identical to Instagram's login screen, hosted on a free subdomain unrelated to Meta.
- 02Thirteen security engines flagged the URL as malicious and one as suspicious; eleven independent antivirus families reported an adverse result.
- 0311 independent antivirus families reported an adverse result.
What this means for you
What happens if you type your password here
You arrive at a page that looks exactly like Instagram's login screen. You enter your phone number, username, or email and your password, then press the Korean 'Log In' button. Those credentials are submitted to the operator of instagram.dothome.co.kr, not to Meta.
How the observed mechanism works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Because the page is flagged as malicious by thirteen security engines and eleven antivirus families, the credentials you submit are treated as stolen data. The operator can use them to take over your Instagram account, and because many people reuse passwords, the same credentials may unlock other services.
Do not enter any information on this page. Close the tab immediately. If you already typed your Instagram password here, change it right now from the official Instagram app or instagram.com, enable two-factor authentication, and review your account's login activity for sessions you do not recognize. If you reused that password elsewhere, change it on those sites too.
Web research findings
Independent findings for instagram.dothome.co.kr, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for instagram.dothome.co.kr. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domaininstagram.dothome.co.kr
- Redirects toinstagram.dothome.co.kr
- Hosted byKorea Telecom
- Referencesfonts.googleapis.com · fonts.gstatic.com
Domain Timeline
- Mar 4, 2004Domain registered
First appeared in WHOIS records — 22 years old when this review was saved.
- Oct 20, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
instagram.dothome.co.kr is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
- Links to 12 social profiles.
Domain & Encryption
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
maliciousMalware, phishing, credential theft and hostile infrastructure.
11 independent antivirus families reported an adverse result. · The page contains a username/email field and a password field with a Korean 'Log In' button, visually identical to Instagram's login screen, hosted on a free subdomain unrelated to Meta.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
No confirmed evidence in this dimension.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 14 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 19, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 20, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 20, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 20, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 20, 2026 |
- Antivirus
- Result14 of 93 engines flagged
- CompletionCompleted
- FindingAdverse
- Freshnessfresh · analysed Oct 19, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 20, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 20, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 20, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 20, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is instagram.dothome.co.kr a scam or a legit website?
Is instagram.dothome.co.kr safe to use?
I already paid or entered my details on instagram.dothome.co.kr — what should I do?
Can I get my money back from instagram.dothome.co.kr?
Did instagram.dothome.co.kr steal my password or personal information?
How do I report instagram.dothome.co.kr?
instagram.dothome.co.kr looks professional — how can it still be a scam?
Has instagram.dothome.co.kr been flagged by antivirus engines?
Is instagram.dothome.co.kr on any phishing or malware blacklists?
How old is the instagram.dothome.co.kr domain?
Where is instagram.dothome.co.kr hosted?
How often is the instagram.dothome.co.kr report updated?
08 · Final Verdict
Final verdict
Fake Instagram login page hosted on a free Korean subdomain is a credential-harvesting phishing trap
This site at instagram.dothome.co.kr is not Instagram. It is a pixel-for-pixel clone of the Instagram login screen placed on a free hosting subdomain, built to capture the username and password you type. Thirteen security engines flag it as malicious and eleven antivirus families independently report it as a threat. The page shows the familiar phone/username/email and password fields with a Korean-language 'Log In' button, and every footer link points to the real Instagram or Meta properties, which is exactly how a phishing page borrows trust. Entering your credentials here sends them to whoever controls this subdomain, not to Meta.
09 · Community