ScanMalware.com

Security Scan Report: ks2csai.z321.de

Redirected to:
https://ks2csai.z321.de/#dashboard
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4bd93e75-56bd-4a2c-98c6-ed96dbd17e4cDomain and IP registration (RDAP)/api/v1/rdap/4bd93e75-56bd-4a2c-98c6-ed96dbd17e4cHow often this domain was scanned/api/v1/domain/stats/ks2csai.z321.deScan history for this domain/api/v1/domain/history/ks2csai.z321.de?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 55 HTTP transactions. The main domain is z321.de and was registered 1 year 6 months ago.

Submitted URL: https://ks2csai.z321.de/

Effective URL:
https://ks2csai.z321.de/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Self-hosted offensive security tool dashboard. Single-source unverified threat-intel match and dual-use tooling warrant caution, but no phishing or credential exfiltration was found.

Risk Factors (4)
Single-source unverified threat-intel match labeling the domain malicious
Domain unranked in Cisco Umbrella
Presence of offensive security features (C2, payload generation, webshell management)
Scanner flagged a disguised password field and unicode confusion (possible false positive from mixed-language UI)
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

The domain name 'ks2csai.z321.de' uses the German country-code top-level domain (.de) with subdomain 'ks2csai'. The second-level label 'z321' is 4 characters long with 0 vowels and one consonant, plus 3 digits. Tokenizing the label suggests 2 words: z, 321. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ks2csai.z321.de/

Page Load Overview

10.19s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:44,861 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
69%
cryptocurrency blockchain
61%
government public service
31%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28172.67.154.232Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
27104.21.6.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
552--

Detected Technologies4

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
Marked
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184F46024A4F80836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B96F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:D2xzlTsknPHYUfzCoQSI0MbNDBKzbUktqysR0/laFQtN8:D2NxFsSlO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:769709:DANmEUzheIUgHY0AGAQAIMAdaBIYoC5pqCAoMIcn6EJxAlkILRFDoINGAvCWSgoCAZuAgRpWRQiG1CG4wvRNQSsKGSAqAkKE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffe7e7ffff
Perceptual Hash:a3d98d62998d6699
Difference Hash:c8104d30484d3085
Wavelet Hash:3ccfa17e5964046d
Color Hash:#7d53ac

Other Hashes

Crop Resistant:c8104d30484d3085

Scan History

Scan history not available

Unable to load historical scan data