Security Scan: DesRedTeam

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/239eaeb5-feab-4f15-b4a4-9f1dddee976a Domain and IP registration (RDAP)/api/v1/rdap/239eaeb5-feab-4f15-b4a4-9f1dddee976aHow often this domain was scanned/api/v1/domain/stats/64.90.12.20 Scan history for this domain/api/v1/domain/history/64.90.12.20?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 60 HTTP transactions. The main domain is 64.90.12.20.

Submitted URL: http://64.90.12.20:8080/

Effective URL:

http://64.90.12.20:8080/#dashboard

Redirected

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Self-hosted offensive-security/C2 console (DesRedTeam) with payload generation, listener and backdoor management on a raw IP over HTTP; single-source malicious report on the host. Do not sign in or interact.

Risk Factors (5)

Command-and-control, beacon building and payload generation capabilities hosted on the scanned host

Backdoor registration/management and session management interfaces present

Single-source threat-intelligence report of the host address as malicious (unverified)

Exposed administrative console over unencrypted HTTP on a raw IP and non-standard port

Credential/secret storage fields including hash and private-key placeholders in the UI

Domain age information unavailable

Details

Page Title

DesRedTeam

Scan Type

public

Favicon Hash

MMH3: 1150676422

MD5: 2b071c89ad6301ca0298ea321244316b

Domain Name Analysis

The domain name '64.90.12.20:8080' uses an unknown top-level domain while skipping any subdomain. The registrable portion '64.90.12.20' spans 11 characters containing zero vowels alongside zero consonants; bonus characters include 8 digits. Word splitting yields four words: 64, 90, 12, 20. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.15s

Total Load Time

9.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:42,833 chars

Detector Agreement:67%

Website Classification

Primary Category

documentation technical63% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

63%

technology software

56%

government public service

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
60	64.90.12.20	Hong Kong, Hong Kong	AS1014NetLab Global
60	1	-	-

Detected Technologies1

Marked

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T190F49424A0F8083A419B06DEB4A87B233AA5F307D6890154B76E4BF04FD7CE1E51B56F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:w2TX/tUCj7CNlYkkt9MYblzClQSIChFCJeBKziyktqy43y/lfQrTS:w2LV79bJIlD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:790432:CgUxSFuAAyRbARLgIhiAJBiAAYAZCg0k/AoCyeQSAggiBsA4QAQtIAKAHiMekIiAlMMJcSISIRQIppC3IAdI9gIYiFQxBMsV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfcfcfc7c7cfff

Perceptual Hash:b197ce6cce933064

Difference Hash:649999999e9e9940

Wavelet Hash:1f0f07c7c3c3c0f8

Color Hash:#40bf97

Other Hashes

Crop Resistant:649999999e9e9940,6969717179d45547

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 64.90.12.20