Security Scan Report: instrumentoguitarra.cfd

Bot Protection Detected

This website is protected by Cloudflare bot protection. Because of this, some results on this page may be inaccurate or missing.

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is instrumentoguitarra.cfd and was registered 2 months ago.

Submitted URL: https://instrumentoguitarra.cfd

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unrelated 83-day-old .cfd domain clones GitHub's homepage and collects emails, with a single-source Astaroth threat-intel match. Brand impersonation plus content-malware indicator = high risk.

Risk Factors (5)
Brand impersonation of GitHub on a non-official domain
Email-collection forms on an impersonation page
Single-source threat-intel match naming the Astaroth malware family on the primary domain
Newly registered (83 days) and unranked domain
Content served behind bot protection that blocks datacenter scanners
Domain age information unavailable

Details

Page Title

GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHubother network

Scan Type

public

Domain Name Analysis

Domain 'instrumentoguitarra.cfd' uses the .cfd top-level domain. Its registrable label 'instrumentoguitarra' stretches across 19 characters split between 8 vowels and eleven consonants. Segmentation suggests 3 words: instrument, o, guitarra. Median word length comes out to 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Q Products ~ Developers ~ Businesses ~ Resources ~ Pricing Search 1) Signin ££ Gitrtub Universe ‘26 Recap > Software still starts with you Enter your email Sign up for GitHub Download GitHub Copilo...

Page Load Overview

0.87s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8,027 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software44% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
44%
phishing/scam
20%

Detected Features

OG: object

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4140.82.121.4Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
0104.21.88.17Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0185.199.108.215Fastly · CDNUnited States
AS54113Fastly, Inc.
013.33.187.2Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
0140.82.113.22United States
AS36459GitHub, Inc.
0140.82.121.5Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
0172.67.150.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
48--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FEC4F8B6E070CA36115F97DBF0F06A10E2D31AA9C6826ED9D24CCB5481CEC9DF953267

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:n4BazgpjlTE3t/n80NBQG9p+H2WSM4Mgwr9WBujvWwWWStZzy/04TmrVHID5UJOH:n4Fz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:543268:SQxgQZFOZTMk2IxAGCCIEQAogbOMEQQBEAsUSoUC0AcohHUGWDFAkOkVKAVSwUbgEKeACAYaDZIYgMIgHcFXSLARgTBAECAk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fde7e7e71c000000
Perceptual Hash:f3f34a48c8ca6a5a
Difference Hash:310c0f0eb0050101
Wavelet Hash:fde7e7e70e530000
Color Hash:07000000c40

Other Hashes

Crop Resistant:310c0f0eb0050101

Scan History

Scan history not available

Unable to load historical scan data