Security Scan: AnyBackup

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/01f922db-630c-470d-87d2-a7655ffb016f Domain and IP registration (RDAP)/api/v1/rdap/01f922db-630c-470d-87d2-a7655ffb016fHow often this domain was scanned/api/v1/domain/stats/47.104.27.249 Scan history for this domain/api/v1/domain/history/47.104.27.249?limit=15

This website contacted 3 IPs in 2 countries across 1 domain to perform 133 HTTP transactions. The main domain is 47.104.27.249.

Submitted URL: http://47.104.27.249:8080/

Effective URL:

http://47.104.27.249:8080/tplus/view/login.html

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Bare-IP host serving multiple vendors' login forms (GitLab, Zulip, Splunk, Avaya et al.) with dumped default credentials; IP flagged malicious by two feeds. Credential-harvesting attack tooling - do not interact.

Risk Factors (5)

Raw IP address with non-standard port, no registered domain or brand ownership

Multiple password/credential forms targeting unrelated vendors' login endpoints (credential-capture tooling)

Brand impersonation: page claims to be GitLab (Open Graph site name/description) and other products on a non-official host

Dumped default device credentials and stack traces indicating offensive tooling

Multi-source malicious threat-intel match against the hosting IP

Domain age information unavailable

Details

Page Title

AnyBackup

Scan Type

public

Domain Name Analysis

Within an unknown top-level domain, '47.104.27.249:8080' is registered with no subdomain. Count 13 characters in '47.104.27.249' holding 0 vowels versus zero consonants; it also includes 10 digits. Tokenizing the label suggests 4 words: 47, 104, 27, 249. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.15s

Total Load Time

12.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:95%

Script:Latin

Direction:ltr

Detection Details

Text Length:12,241 chars

Detector Agreement:100%

All Detected Languages

🇺🇸en(95%)🇪🇸ca(1%)🇼🇦cy(1%)🇫🇷fr(1%)🇳🇱nl(1%)🇭🇷hr(1%)🇵🇹pt(0%)🇮🇩id(0%)🇨🇳zh(0%)

Website Classification

Primary Category

technology software69% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

69%

documentation technical

58%

corporate business

50%

government public service

40%

phishing/scam

40%

Detected Features

OG: object

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
110	47.104.27.249	Qingdao, Shandong, China	AS37963Hangzhou Alibaba Advertising Co.,Ltd.
44	104.16.179.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.16.180.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
133	3	-	-