Security Scan Report: ios18.345p67.beer

Redirected to:
https://ios18.345p67.beer/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is 345p67.beer and was registered 1 month ago.

Submitted URL: https://ios18.345p67.beer/

Effective URL:
https://ios18.345p67.beer/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

New 3-day-old, unranked domain hosting an unattributed 'Coruna' admin login panel with a mismatched name and no verifiable owner. No malware, IoC or exfiltration evidence found, so it stays moderate risk — do not enter credentials.

Risk Factors (4)
Three-day-old domain serving an administrator login panel
Title/domain mismatch — the panel names itself 'Coruna' but runs on the unrelated random host 345p67.beer
Self-described 'device management and control platform' of unknown ownership with a third-party source-code credit
Random, low-trust hostname/TLD (.beer with alphanumeric gibberish subdomain) with no reputation
Safety Factors (6)
Form posts same-origin: no cross-origin or external credential submission
No credential exfiltration detected in JavaScript; no cross-origin JS targets
No threat-intelligence matches, no hunting rule malware patterns, no network IDS alerts
No payment fields, no disguised password fields, no hidden credential capture
No brand impersonation of another identifiable entity — the page only displays its own 'Coruna' name
The only risk signals are a newly registered domain and the site's own login form, which posts to the same site. No impersonation of another brand, no threat-intelligence match and no credential exfiltration were found; adjusted from 6 to 5
Domain age information unavailable

Details

Page Title

Coruna 管理后台

Scan Type

public

Domain Name Analysis

Within the .beer top-level domain, 'ios18.345p67.beer' is registered and includes subdomain 'ios18'. Count 6 characters in '345p67' holding zero vowels versus 1 consonant, along with five digits. Splitting it apart reveals 3 words: 345, p, 67. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ios18.345p67.beer/

Page Load Overview

7.33s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:126 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software93% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
93%
documentation technical
47%
government public service
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7154.221.24.241Seychelles
AS142403YISU CLOUD LTD
71--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T168F0D58214F0841B62301350ACD1FC1C4C82EB46C309AE40B4EBA1FC0FA8B8A8C9F87C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqds7YOLBrAMMJApAoxfAbpli7vk8A1ireAqIbR2+MvfWHwlUeRrV4LKTj+GwC:hrsoMAzy7TA1+qsKWbeRrVSuqAEd0Bl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:aa6babe29eee447792d98197e3ef7013

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000c1c1c1c1c0c00
Perceptual Hash:9b53646c649b9b26
Difference Hash:a7d959595959d927
Wavelet Hash:001c3d1d3f3f1f07
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data