ScanMalware.com

Security Scan Report: 104.239.66.47

Redirected to:
https://104.239.66.47:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5bb33798-ad98-47a4-b383-a2a180b852f7Domain and IP registration (RDAP)/api/v1/rdap/5bb33798-ad98-47a4-b383-a2a180b852f7How often this domain was scanned/api/v1/domain/stats/104.239.66.47Scan history for this domain/api/v1/domain/history/104.239.66.47?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 55 HTTP transactions. The main domain is 104.239.66.47.

Submitted URL: http://104.239.66.47:8080/

Effective URL:
https://104.239.66.47:8080/#dashboard
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Self-branded, login-gated security/C2 management console on a bare IP with no verifiable operator. No threat-intel, hunting rule, IDS or exfiltration evidence, but offensive tooling and an unattributable host warrant caution.

Risk Factors (4)
Bare IP address hosting with no domain, no registrar identity and unknown age — no way to attribute the operator.
The dashboard openly exposes command-and-control, payload/beacon generation and webshell management functionality, which is abuse-prone infrastructure if it is not a closely held red-team instance.
Disguised password field (text input with password placeholder) reported by the scanner, combined with a large number of password-type fields in the DOM.
Mixed-script / Unicode-confusable text detected in form fields.
Safety Factors (4)
No Indicators of Compromise matches, no hunting rule/JavaScript malware detections, no IDS alerts and no known-kit roster match.
No impersonation of another organisation's brand — the page presents only its own 'CyberStrikeAI' branding.
Cross-origin analysis shows forms submit to the same origin (104.239.66.47:8080); no credential exfiltration detected and no external domains referenced.
No payment fields; the only credential form is the site's own administrative sign-in page, not a lure for a third party's account.
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

You're looking at domain '104.239.66.47:8080' on an unknown top-level domain while skipping any subdomain. The core label '104.239.66.47' covers 13 characters with 0 vowels and zero consonants; it also includes ten digits. Word splitting yields four words: 104, 239, 66, 47. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

[Barres | [ cu | [ QD system | | @engin | | + | | a | bs) CyberStrikeAl | < || Dashboard @ Lastupdated - | Refresh | WORKSPACE SECURITY OPERATIONS Running conversations Total vulnerabilities fo)...

Page Load Overview

1.85s
Total Load Time
8.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:44,030 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
76%
documentation technical
71%
cryptocurrency blockchain
61%
government public service
33%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
55104.239.66.47France
AS214961Stellar Group SAS
551--

Detected Technologies1

Marked
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2F46124A4F80836419B46DEB1A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:V2xzlTsknTHYUfzCEQSI0MbNDBKzbUktqysR0/laFQtNO:V2NxFQSl8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:761560:EQ9BDg5AdgkiiRAISKRDYEA2gtAcCAV8GZTi0AgAJQENoJQQQYJGNQgkglDLNYSxFFIzQCESJICMihQeAMQiQBEREJBJh+CA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffe7e7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c8104d30484d3085
Wavelet Hash:3ccfa17e7924046d
Color Hash:070000001c0

Other Hashes

Crop Resistant:c8104d30484d3085

Scan History

Scan history not available

Unable to load historical scan data