Criticalscore 80 · flagged Friday, September 25, 2026

instagrab.download

Appeared in the .download zone on Friday, September 25, 2026; by the end of that day the census found active website about streaming piracy. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: instagrab≈instagram
+28
TLD with a high abuse rate
matched: download
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand in page title, not in the name
matched: instagram
+20
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
colin.ns.cloudflare.com, lucy.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Instagram Downloader – Download Instagram Videos & Reels | InstaGrab
Has a form
yes
Brand echoed
instagram

Model opinions

Second opinionlooks benignconfidence 65%· claude-opus-5-5

This is a third-party Instagram media downloader under its own 'InstaGrab' branding. Its only form is a GET URL-paste box posting to itself, with no password, payment or personal-data fields and no pretence of being Instagram. The 'insta' prefix plus the brand in the title reflects a common, ToS-grey downloader-tool niche rather than a phishing or squat attempt.

First passlooks benignconfidence 85%· claude-haiku-4-5

InstaGrab is a legitimate third-party Instagram content downloader with its own brand identity, logo, and functional service. While the domain uses a brand-adjacent name and references Instagram, it does not impersonate Instagram itself—the page clearly presents InstaGrab as a separate tool, has no login form requesting Instagram credentials, and the form only accepts Instagram URLs for download processing, not personal data or passwords.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, September 25, 2026

Screenshot of instagrab.download taken by the zone census on 2026-09-25

Same data as JSON: /api/zone/domain/instagrab.download. This page is not indexed by search engines and does not link to the site it describes.