cms-instagram.xyz
Appeared in the .xyz zone on Tuesday, September 1, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Domain embeds the Instagram brand with a generic 'cms-' prefix and serves only an nginx 404 with no content; it is part of a cluster of 22 identical blank brand-named pages, the classic staged brand-squat/infrastructure-parking shape with no legitimate use by Meta (registered at a retail registrar behind Cloudflare NS).
The domain cms-instagram.xyz contains Instagram's brand name in a subdomain-like pattern typical of brand squatting. The page is currently a 404/boilerplate, but the clustering evidence (22 identical pages across similar domains) and the strategic use of Cloudflare nameservers with a retail registrar suggest this is part of a coordinated squat campaign. No active phishing content is visible yet, but the infrastructure and naming pattern indicate intent to host deceptive content.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 1, 2026
Same data as JSON: /api/zone/domain/cms-instagram.xyz. This page is not indexed by search engines and does not link to the site it describes.