Security Scan Report: 149.104.29.60

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 59 HTTP transactions. The main domain is 149.104.29.60.

Submitted URL: https://149.104.29.60:8080/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Self-hosted 'CyberStrikeAI' console exposing C2, WebShell and payload-generation features, on a bare IP:8080 matching a single-source malicious 'cyberstrikeai' threat-intel tag. Offensive tooling; avoid.

Risk Factors (4)
Control interface for offensive C2/WebShell/payload tooling (command-and-control capability)
Single-source threat-intel submission tagging this exact IP:port as malicious 'cyberstrikeai'
Served on a raw IP:8080 with no domain reputation or verifiable operator identity
Login-gated console storing multiple third-party API keys and bot secrets
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

Domain '149.104.29.60:8080' uses an unknown top-level domain with no subdomain. The registrable portion '149.104.29.60' spans 13 characters with zero vowels and zero consonants; bonus characters include ten digits. It segments into 4 words: 149, 104, 29, 60. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://149.104.29.60:8080/

Page Load Overview

3.18s
Total Load Time
684 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:20,963 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software81% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
81%
cryptocurrency blockchain
72%
government public service
47%
documentation technical
47%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
59149.104.29.60United States
AS139659LUCIDACLOUD LIMITED
591--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155E47328A4F80876419746CEB1A87B172AA4F307D69A0044736E4BF44FD7CE2E91797F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:SI5ursm8XVGNaM9h+Z7GGSomzM5iGhNzMNpUCYs4fyec3jO:SI5d4efP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:699773:oSJQpgWtBiIMwQERiFFBqDVMAquELYCjVSa4zGBgAAwXlQQiwoAEJTKAEAzZogoq0GIggBiAiEJEoEAKWg1EkyIHIBCqhkBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f7f7f7f7f7f7f
Perceptual Hash:80070f0700fffdfc
Difference Hash:c0c080a080808080
Wavelet Hash:7e3e7e7e42424242
Color Hash:#d27997

Other Hashes

Crop Resistant:c0c080a080808080

Scan History

Scan history not available

Unable to load historical scan data