Security Scan Report: 198.200.54.240

Redirected to:
https://198.200.54.240:8800/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 73 HTTP transactions. The main domain is 198.200.54.240.

Submitted URL: https://198.200.54.240:8800/

Effective URL:
https://198.200.54.240:8800/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Self-branded ARTEX penetration-testing console login on a bare IP with unknown reputation. No phishing, impersonation, or malware evidence, but HIGH IDS alerts and an unverifiable host warrant caution.

Risk Factors (3)
Login form hosted on a bare IP address with no verifiable domain identity
Two HIGH network IDS alerts for 'GPL ATTACK_RESPONSE id check returned root'
Limited independent legitimacy/reputation signals for the host
Safety Factors (5)
No brand impersonation detected; page uses its own 'ARTEX' branding
Login form submits same-origin to 198.200.54.240:8800, not to an external credential-harvesting endpoint
No cross-origin credential exfiltration detected
No threat-intelligence IoC matches, JavaScript hunting rule malware patterns, or known malicious kits identified
All JavaScript is served from the site's own domain
Domain age information unavailable

Details

Page Title

ARTEX: Autonomous Penetration Testing Console

Scan Type

public

Domain Name Analysis

The domain name '198.200.54.240:8800' uses an unknown top-level domain while skipping any subdomain. Its registrable label '198.200.54.240' stretches across 14 characters split between 0 vowels and zero consonants, plus eleven digits. Word splitting yields 4 words: 198, 200, 54, 240. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://198.200.54.240:8800/

Page Load Overview

4.31s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:99 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
51%
phishing scam
28%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
73198.200.54.240San Jose, California, United States
AS54600PEG TECH INC
731--

Detected Technologies2

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T196139505BC08E6606C3BED4D95BD5F39C058E8728A318469F14DC98D8BD2BF227E9ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7TuPkcoZh1V5x0rGV4xksc64Jysq7vFh+vz+vJBmA+1DNFyfB2LZFWO:lfebx/c64Jysq7v2vyv/mb1hFf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:43874:OQSwgAgKIIEEQBAYM0URnEJMEyE4FhYC0gQ1ADgAhIIcdiAQhAER6ZkKBxwMCYhKQEACUCNQpDIIcECRFQiCbYEUYSaIMjhV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92976df0926f16
Difference Hash:747476f6f7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#d279b2

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data