ScanMalware.com

Security Scan Report: 52.128.244.66

Redirected to:
http://52.128.244.66:8080/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/18f93291-d0df-41ad-bc98-478aba72777eDomain and IP registration (RDAP)/api/v1/rdap/18f93291-d0df-41ad-bc98-478aba72777eHow often this domain was scanned/api/v1/domain/stats/52.128.244.66Scan history for this domain/api/v1/domain/history/52.128.244.66?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 77 HTTP transactions. The main domain is 52.128.244.66.

Submitted URL: http://52.128.244.66:8080/

Effective URL:
http://52.128.244.66:8080/login
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Bare-IP login console on :8080 advertising pentest tooling, with a multi-source malicious threat-intel verdict on its own address and HIGH IDS alerts indicating root-level command execution. Avoid; do not enter credentials.

Risk Factors (5)
Multi-source threat-intel verdict of malicious against the site's own IP address
Three HIGH IDS alerts consistent with successful command execution / root compromise on the host
No domain name; served directly from an IP on port 8080 with a login gate
Content advertises offensive/penetration-testing tooling and displays root shell output
Obfuscated filler text resembling anti-analysis or bot-blocking content
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

The domain '52.128.244.66:8080' uses an unknown top-level domain while skipping any subdomain. The second-level label '52.128.244.66' is 13 characters long holding zero vowels versus zero consonants, along with ten digits. It segments into 4 words: 52, 128, 244, 66. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://52.128.244.66:8080/

Page Load Overview

5.07s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:50%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:936 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as ja

Website Classification

Primary Category

cryptocurrency blockchain79% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
79%
phishing scam
64%
technology software
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7752.128.244.66Japan
AS963N963 PTE. LTD.
771--

Detected Technologies1

React
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11043C644B806D534682F6F5C63F91E39C018E812D6259C24F19ECD5F8BCBEF5239AA93

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:EfLKx/c64Jysq7vvnkGj6+SpbDamdTgP1/Bu9+BAIMpDYMMaw4Km78SrmNZRLvZU:EfLckGRvZvcmW1R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60352:VUeD0ghlSLECBKKspXEo+GYUBBAG2qAARQSFDFAyAFAAwUgPgaUiWYiQLSgFxCBoQKKWCEAFJIrABKWAShBABQhIG0nhQrAN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:6363e0e0ccccd0d0
Perceptual Hash:f0a10f1ff0e8170f
Difference Hash:ce8e8e9898382020
Wavelet Hash:6363e3e4e8dcd0d0
Color Hash:#bf8240

Other Hashes

Crop Resistant:ce8e8e9898382020

Scan History

Scan history not available

Unable to load historical scan data