Security Scan: Fake security tools on GitHub push backdoors

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3add0f6b-8dcc-4ad9-ab2c-f5fbcfecdc0a Domain and IP registration (RDAP)/api/v1/rdap/3add0f6b-8dcc-4ad9-ab2c-f5fbcfecdc0aHow often this domain was scanned/api/v1/domain/stats/bleepingcomputer.com Scan history for this domain/api/v1/domain/history/bleepingcomputer.com?limit=15

This website contacted 50 IPs in 4 countries across 32 domains to perform 161 HTTP transactions. The main domain is bleepingcomputer.com and was registered 22 years ago.

Submitted URL: https://www.bleepingcomputer.com/news/security/fake-security-tools-on-github-push-backdoors-and-infostealers/

The Cisco Umbrella rank of the primary domain is #104,432 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 96%

Risk Score

Established cybersecurity news site (BleepingComputer) publishing a report on malicious GitHub repos; self-branded, same-origin login only, no threat-intel or malware signals.

Safety Factors (5)

Well-established domain (22+ years old, registered 2004)

Self-branding matches the domain; no impersonation of another entity

News article structure with byline (Bill Toulas), breadcrumbs and related articles

Same-origin login form for the site's own forums

Third-party scripts are all top-1M ranking ad/analytics/CMP providers

Domain age information unavailable

Details

Page Title

Fake security tools on GitHub push backdoors and infostealers

Scan Type

public

Favicon Hash

MMH3: -1506281292

MD5: 70ba40cb9e4b22abf6f348f6317744e6

Domain Name Analysis

Domain 'www.bleepingcomputer.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Count 16 characters in 'bleepingcomputer' holding 6 vowels versus ten consonants. Breaking it apart gives two words: bleeping, computer. Median word length is eight characters. No strong language cues emerged from the frequency lists.

Screenshot

UWEERINGCOMPUTE Home > News > Security > Fake: Fake security tools q By Bill Toulas: [NEWS = MR TUTORIALS CEES ©0O8 DOWNLOADS 4 [DEALS Gp [FORUMS] We value your privacy We and our partners st...

Page Load Overview

3.59s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-us

Text Length:7,674 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software68% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

68%

documentation technical

39%

news media journalism

37%

education learning

36%

news/blog

35%

Detected Features

Comments

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	172.66.135.165Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.66.139.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	104.26.12.6Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.20.18.126Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.97Google · CDN	United States	AS15169Google LLC
3	142.251.156.119Google · CDN	United States	AS15169Google LLC
3	142.250.154.156Google · CDN	United States	AS15169Google LLC
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	34.160.152.31Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
161	50	-	-