Security Scan: X. It’s what’s happening / X

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/40ff5c1b-86e4-4ac8-bfb5-7c9b0652d4eb Domain and IP registration (RDAP)/api/v1/rdap/40ff5c1b-86e4-4ac8-bfb5-7c9b0652d4ebHow often this domain was scanned/api/v1/domain/stats/plipal.instrumentobaixo.cfd Scan history for this domain/api/v1/domain/history/plipal.instrumentobaixo.cfd?limit=15

This website contacted 9 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is instrumentobaixo.cfd and was registered 2 months ago.

Submitted URL: https://plipal.instrumentobaixo.cfd

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

X (Twitter) login page cloned on the unranked 78-day-old domain plipal.instrumentobaixo.cfd, which also matches Astaroth threat intelligence. Credential phishing — never enter your X password here.

Risk Factors (6)

Brand impersonation of X on a non-official, unranked domain

Credential harvesting form (email/username + password) on an impersonating page

Content-malware threat-intel matches (Astaroth) on the primary domain and its parent domain

Domain only 78 days old

Bot-protection block served to scanners while real users see the phishing page

Legal/terms links present only as decoy legitimacy signals (legitimacy score 10/100)

Domain age information unavailable

Details

Page Title

X. It’s what’s happening / Xother network

Scan Type

public

Domain Name Analysis

You're looking at domain 'plipal.instrumentobaixo.cfd' on the .cfd top-level domain; it also runs on subdomain 'plipal'. Its registrable label 'instrumentobaixo' stretches across 16 characters holding 7 vowels versus nine consonants. Splitting it apart reveals 4 words: instrument, o, baix, o. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Happening now. [oo Continue with phoney C G Continue with Google C ¢§ Continue with Apple or Email or username L/S By continuing, you agree to our Terms of Service, Privacy Policy and Cookie Use....

Page Load Overview

0.85s

Total Load Time

12 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:899 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical61% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

61%

technology software

42%

corporate business

40%

corporate

25%

phishing/scam

20%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	172.66.0.227Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.21.56.235Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	162.159.140.229Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	146.75.120.159Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
0	34.160.81.0Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
0	142.251.127.84Google · CDN	United States	AS15169Google LLC
0	2.16.168.53Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	104.18.31.78Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.137.252Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	9	-	-