ScanMalware.com

Security Scan Report: 103.116.247.42

Redirected to:
http://103.116.247.42:8787/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3e3331f8-0862-4e35-8005-bed0bc92517cDomain and IP registration (RDAP)/api/v1/rdap/3e3331f8-0862-4e35-8005-bed0bc92517cHow often this domain was scanned/api/v1/domain/stats/103.116.247.42Scan history for this domain/api/v1/domain/history/103.116.247.42?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 67 HTTP transactions. The main domain is 103.116.247.42.

Submitted URL: http://103.116.247.42:8787/

Effective URL:
http://103.116.247.42:8787/login
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unencrypted login panel on a bare IP presenting as an LLM pentest console; exact IP:port carries a single-source 'malicious' indicator and the host fired HIGH IDS root-execution response alerts. Do not enter credentials.

Risk Factors (5)
Credential prompt on a raw IP address with no TLS encryption — submitted passwords travel in cleartext
Single-source 'malicious' indicator naming this exact IP:port
HIGH-severity IDS attack-response signatures indicating root command execution on the host
Host claims to be a penetration-testing/C2-style control console exposed publicly
Login form present in HTML but not rendered in the visible capture (inconsistent presentation)
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

Domain '103.116.247.42:8787' uses an unknown top-level domain with no subdomain. Count 14 characters in '103.116.247.42' split between zero vowels and 0 consonants; it also includes 11 digits. Splitting it apart reveals 4 words: 103, 116, 247, 42. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://103.116.247.42:8787/

Page Load Overview

8.44s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:52 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software61% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
61%
cryptocurrency blockchain
38%
phishing scam
36%
documentation technical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
67103.116.247.42Hong Kong
AS401696cognetcloud INC
671--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T131039445BC08E6606C3BAD1D96BD5F39C058F8728A318428F14DC98E8BD1BF627E5ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7MuEkcoZh1V5x0rGV4xksc64Jysq7vFQ+vz+vl1ENFyfB2LZFRf:pfebx/c64Jysq7vLvyvl1yFt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40990:JhSKBpHMkUSCIMEAwhgggJCQMsDUZ4xAoKDABgBQFD4AwgKilgoAooAACSIPQArQR1WhICMwiFwoBQcC2QABBgGDAbQ10EAz

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92976de0922f6d
Difference Hash:747476f6f7777076
Wavelet Hash:1f1f1f1311111f1f
Color Hash:#d22d4b

Other Hashes

Crop Resistant:00000c08160e0004,00100c32320c1000

Scan History

Scan history not available

Unable to load historical scan data