Security Scan Report: 38.76.167.242

Redirected to:
https://38.76.167.242/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 71 HTTP transactions. The main domain is 38.76.167.242.

Submitted URL: https://38.76.167.242/

Effective URL:
https://38.76.167.242/login
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

3
Risk Score

Password-protected 'autonomous pentest console' on a bare, unranked IP, flagged by two HIGH IDS alerts for root shell output in responses. No brand impersonation or threat-intel hit, but behaviour fits attack infrastructure — avoid.

Risk Factors (4)
No domain name — bare IP hosting for a credential-protected console
HIGH IDS alert indicating root shell command output returned in HTTP responses
Unranked/unknown-age host operating an authentication portal
Inline JavaScript performing encoding/decoding
Safety Factors (6)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware (hunting rule) patterns and no known-kit roster hits
Own-brand login form, same-origin, with no cross-origin form action and no credential exfiltration
No disguised password fields, no payment fields, no cross-origin script hosts
Page text makes no claim to represent another organisation
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

Within an unknown top-level domain, '38.76.167.242' is registered while skipping any subdomain. Count 13 characters in '38.76.167.242' containing 0 vowels alongside zero consonants, plus ten digits. Tokenizing the label suggests 4 words: 38, 76, 167, 242. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://38.76.167.242/

Page Load Overview

23.44s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:67 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
72%
cryptocurrency blockchain
62%
phishing scam
46%
government public service
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7138.76.167.242Kwai Chung, Kwai Tsing District, Hong Kong
AS401701cognetcloud INC
711--

Detected Technologies1

Nginxv1.22.1
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B013A505BC08E6606C3BED0D96BD5E39C058B8738A318468F14DC98D8BD5BF627E9ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7kulkcoZh1V5x0rGV4xksc64Jysq7vFr+vz+v+BmAL1bNFyfB2LZFqb:sfebx/c64Jysq7vMvyvcmW1pFU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42737:whZSCFagREOhIYvIKIJCiWCRQlJWgUoEMxGQBA4tEAgWEAMRmDBGSlIJgBCICAK2gciICTgAyYUBpByt0PmKBkESi1UEhxZB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92976df0926f16
Difference Hash:747476f6f7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#3a7841

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data