Security Scan: shot_cf_1015_1824.png (1920×1080)

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/34dd0142-da1a-452d-9e86-9272cc2fa6c5 Domain and IP registration (RDAP)/api/v1/rdap/34dd0142-da1a-452d-9e86-9272cc2fa6c5How often this domain was scanned/api/v1/domain/stats/166.88.95.90 Scan history for this domain/api/v1/domain/history/166.88.95.90?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is 166.88.95.90.

Submitted URL: http://166.88.95.90:8088/shot_cf_1015_1824.png

AI Security Verdict

Moderate Risk

Confidence: 48%

Risk Score

Bare IP on port 8088 serving only a PNG screenshot; no forms, branding, scripts or content-malware hits. The image depicts API login commands to the same host, so treat the address with caution.

Risk Factors (3)

Content served from a bare IP address with no domain, TLS or verifiable operator identity

Response is a standalone image file whose OCR content depicts API authentication commands against the same IP, with no context explaining its purpose

Unusual non-standard port hosting of loose screenshot files, which is more typical of throw-away/tooling infrastructure than a normal public site

Safety Factors (4)

No forms of any kind (0 password, 0 payment, 0 hidden credential fields) were parsed from the response

No JavaScript, no third-party script hosts and no cross-origin credential exfiltration detected

No YARA malware patterns, no kit-roster match, no network IDS alerts

The single threat-intelligence match is a generic abuse-reputation tag on the host address, not a content-malware indicator, and is unverified single-source

Domain age information unavailable

Details

Page Title

shot_cf_1015_1824.png (1920×1080)

Scan Type

public

Domain Name Analysis

The domain name '166.88.95.90:8088' uses an unknown top-level domain while skipping any subdomain. The core label '166.88.95.90' covers 12 characters with zero vowels and zero consonants, along with nine digits. It segments into four words: 166, 88, 95, 90. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.19s

Total Load Time

457 KB

Total Size

Language Analysis

Primary Language

🇯🇵Japanese

Code: ja

Confidence:50%

Script:Mixed

Direction:ltr

Detection Details

Text Length:33 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	166.88.95.90	Osaka, Osaka, Japan	AS149440Evoxt Sdn. Bhd.
2	1	-	-

Detected Technologies2

SimpleHTTPv0.6

40%

Pythonv3.14.4

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1F00E68C1822949F60382BC8CE0E1246426808087819F0AB6BB70D3FA8D8D058720EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:q/o0H/fAbploUn6V2GFqHX96v6Oq5Ss/0KZGbRadUqYYl91fqMLeTPFvi2RPEvR0:3uAYUngqHkvEZ//B1fqMW1ur19yyob

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:cb76048d7286c714acce926cc9b166f9

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8181818181df9f

Perceptual Hash:fce395c08595619d

Difference Hash:a22b2b2b23233332

Wavelet Hash:ff8181818181dfbf

Color Hash:#c58793

Other Hashes

Crop Resistant:232b232321072173,a22b2b2b23233332,45050581a5450761

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 166.88.95.90