ScanMalware.com

Security Scan Report: 149.30.245.147

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/50e5b6d2-8607-4dfd-82f5-09dc89186ceeDomain and IP registration (RDAP)/api/v1/rdap/50e5b6d2-8607-4dfd-82f5-09dc89186ceeHow often this domain was scanned/api/v1/domain/stats/149.30.245.147Scan history for this domain/api/v1/domain/history/149.30.245.147?limit=15
This website contacted 3 IPs in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is 149.30.245.147.

Submitted URL: https://149.30.245.147/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Page posing as the Xiongan New Area 2026 industry summit is a DarkSword/Coruna iOS exploit-kit delivery page (fake captcha gate, CRITICAL YARA + analyst-vetted kit roster). Do not load on any device.

Risk Factors (5)
Known malicious iOS exploit kit (DarkSword/Coruna wallet stealer) delivered via fake captcha gate
CRITICAL YARA exploit-kit rule match on page HTML
Government/event brand impersonation (Xiongan New Area summit) on a bare-IP host
Page JavaScript beacons to an external IP-echo service (icanhazip.com) for victim profiling
Served from raw IP rather than the official hostname of the claimed organisers
Domain age information unavailable

Details

Page Title

雄安新区2026产业发展峰会

Scan Type

public

Domain Name Analysis

You're looking at domain '149.30.245.147' on an unknown top-level domain. The core label '149.30.245.147' covers 14 characters split between zero vowels and 0 consonants; it also includes eleven digits. Word splitting yields four words: 149, 30, 245, 147. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://149.30.245.147/

Page Load Overview

1.54s
Total Load Time
26 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:637 chars
Detector Agreement:100%

Website Classification

Primary Category

forum community discussion47% confidence
Type: static
Method: ml+structural

All Detected Categories

forum community discussion
47%
cryptocurrency blockchain
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4149.30.245.147United States
AS133199SonderCloud Limited
3104.16.185.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.184.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103--

Detected Technologies2

HTTP/3
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BAC1517391052037B82794E0B6309BAF70C1CE26F8536A25AAF5B3E9CBC5DD6DB15309

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:tTuBZE5F7efM1Zx7P54mZT0E+P4lfm6KFa6NnWMnpZ2uR1ja:aDfaZx7fTq3W7wa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6013:KAABwgQOGCAgFGKAhACOgwAkxQKCQQRUAAABAEWgmmgCCCFXnMaIFKgFCCAgAFEBACBIQLigIlAAAgSNHDAAACjAAAEJOAcF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffffffff
Perceptual Hash:813f3f090c0c3f9f
Difference Hash:f34808a2e0c0e0c0
Wavelet Hash:0000241e3f7f7f3f
Color Hash:#77862d

Other Hashes

Crop Resistant:f34808a2e0c0e0c0,fffff7b3f3f7f7ff

Scan History

Scan history not available

Unable to load historical scan data