Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from trusted issuer

Established domain (2+ years old)

Fast loading times

Active social media presence

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

DigiCert Inc

Valid From

Aug 17, 2025

Valid Until

Nov 15, 2025

Certificate Expired

Security Headers

HSTS

CSP

X-Frame-Options

Domain & WHOIS Information

Domain Age

21 years 6 months

Registered Jun 04, 2004

Very High Trust

Jun 2004 Expires Jun 2034

Established domain (5+ years) - High trust indicator

Registrar

RegistrarSafe

Registration Date

Jun 04, 2004 (21 years ago)

Last Updated

Jun 25, 2025

Expiration Date

Jun 04, 2034 (0 days remaining)

Server Location

Belgium

Abuse Contact

N/A

   Domain Name: INSTAGRAM.COM
   Registry Domain ID: 121748357_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.registrarsafe.com
   Registrar URL: http://www.registrarsafe.com
   Updated Date: 2025-06-25T19:12:42Z
   Creation Date: 2004-06-04T13:37:18Z
   Registry Expiry Date: 2034-06-04T13:37:18Z
   Registrar: RegistrarSafe, LLC
   Registrar IANA ID: 3237
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1-650-308-7004
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited
   Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
   Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited
   Name Server: A.NS.INSTAGRAM.COM
   Name Server: B.NS.INSTAGRAM.COM
   Name Server: C.NS.INSTAGRAM.COM
   Name Server: D.NS.INSTAGRAM.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-11-08T01:20:08Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

1

A

1

AAAA

2

MX

8

TXT

4

NS

                                                            adobe-idp-site-verification=367fda82-a8bb-46cf-9cff-0062d452d229
                                                        

                                                            nEXgIFIbDifAKlSMQvAhly5SA-vpsAkm5wiOdwdkrzY
                                                        

                                                            v=spf1 include:facebookmail.com include:_spf.fb.com -all
                                                        

SPF

                                                            4cbb1b68-601f-4801-8e7f-e8f68a4a41dd
                                                        

                                                            hyWdekepiNsp/V9b1JCR+wZDdzbESurl4GqY+FLMfiN+7aeFaway0Art+kNDHeL5OnGZipNeV/iIC+lOONSQVQ==
                                                        

                                                            ms=ms86975275
                                                        

                                                            google-site-verification=GGtId51KFyq0hqX2xNvt1u0P9Xp0C7k6pp9do49fCNw
                                                        

                                                            google-site-verification=_iQgLr68Rdg7YnN2PqOljSG5dnWOFUUXISF9R77fs5c
                                                        

                                                            b.ns.instagram.com
                                                        

                                                            c.ns.instagram.com
                                                        

                                                            a.ns.instagram.com
                                                        

                                                            d.ns.instagram.com
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (6)

HSTS

Content Security Policy

Clickjacking Protection

MIME Sniffing Protection

XSS Filter

COOP

Cache Policy

                                            private, no-cache, n...
                                        

{
    "location": "https:\/\/www.instagram.com\/",
    "strict-transport-security": "max-age=31536000; preload; includeSubDomains",
    "x-stack": "www",
    "content-type": "text\/html; charset=\"utf-8\"",
    "x-fb-debug": "5EGwvo7gIfPEBgsOqLOjhKBCOzmaU\/6CAfrWRRW72\/a6IiyefqzWAYu0q0cMVSvfalGZJQpxuyx9iA22jrN54A==",
    "content-length": "0",
    "date": "Sat, 08 Nov 2025 01:20:22 GMT",
    "alt-svc": "h3=\":443\"; ma=86400",
    "x-fb-connection-quality": "EXCELLENT; q=0.9, rtt=7, rtx=0, c=16, mss=1380, tbw=3075, tp=-1, tpl=-1, uplat=207, ullat=0",
    "content-encoding": "gzip",
    "set-cookie": "mid=aQ6a1gALAAEYt888mZMOGd37J2gr; expires=Sun, 13-Dec-2026 01:20:22 GMT; Max-Age=34560000; path=\/; domain=.instagram.com; secure; httponly; SameSite=None",
    "accept-ch-lifetime": "4838400",
    "accept-ch": "viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model",
    "pragma": "no-cache",
    "cache-control": "private, no-cache, no-store, must-revalidate",
    "expires": "Sat, 01 Jan 2000 00:00:00 GMT",
    "content-security-policy": "default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-9Nl6DbUi' blob: 'self' 'wasm-unsafe-eval' https:\/\/*.google-analytics.com https:\/\/translate.google.com https:\/\/apis.google.com https:\/\/accounts.google.com;style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss:\/\/edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss:\/\/*.facebook.com:* ws:\/\/localhost:* blob: *.cdninstagram.com wss:\/\/*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https:\/\/fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https:\/\/www.gstatic.com https:\/\/*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com cdn.fbsbx.com lookaside.fbsbx.com data: blob: https:\/\/*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;",
    "document-policy": "include-js-call-stacks-in-crash-reports",
    "x-frame-options": "DENY",
    "x-content-type-options": "nosniff",
    "x-xss-protection": "0",
    "reporting-endpoints": "coop_report=\"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0\", default=\"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/?device_level=unknown&brsid=7570158268794093136&cpp=C3&cv=1029576945&st=1762564822098\"",
    "report-to": "{\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\\/\\\/www.facebook.com\\\/browser_reporting\\\/coop\\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\\/\\\/www.instagram.com\\\/error\\\/ig_web_error_reports\\\/?device_level=unknown&brsid=7570158268794093136&cpp=C3&cv=1029576945&st=1762564822098\"}]}",
    "cross-origin-opener-policy": "same-origin-allow-popups",
    "vary": "Accept-Encoding",
    "origin-agent-cluster": "?1"
}

IP Geolocation

Server location and network information

Belgium

Brussels

IP Address

179.60.195.174

ISP / Hosting

Facebook, Inc.

Coordinates

50.8534, 4.347

Country Code

BE

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:facebookmail.com include:_spf.fb.com -all

DMARC

v=DMARC1; p=reject; rua=mailto:[email protected]; pct...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.88s

Excellent

Page Size

0.69MB

Optimized

Requests

182

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Spamhaus DBL

Blacklisted

SURBL

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.instagram.com

admin.instagram.com

blog.instagram.com

api.instagram.com

m.instagram.com

help.instagram.com

Privacy & Trackers

1 Trackers Found

Google DoubleClick

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Instagram.com is a widely recognized social media platform focused on visual content sharing. Users can share photos and videos, connect with others, and explore diverse content. The site uses technologies like Shopify and React.

Security Assessment

Instagram.com has a valid SSL certificate issued by DigiCert, expiring in late 2025, ensuring encrypted communication. The domain is quite old (21+ years), a positive indicator. However, the presence of the website on one blacklist is a significant concern.

Trust Level

The FlareScore of 73/100 indicates a warning level of risk. This suggests potential vulnerabilities or security issues that users should be aware of. The blacklist presence and a single tracker are the main issues.

Recommendations

Exercise caution when using Instagram.com. Be wary of phishing attempts or suspicious links shared on the platform. Enable two-factor authentication (2FA) for your account to enhance security. Given the blacklist status, it's advisable to keep your account information and activities as secure as possible.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

instagram.com

FlareAI™ Summary