Security Scan Report: 213.111.150.145

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is 213.111.150.145.

Submitted URL: http://213.111.150.145/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Operator console of the Wisp C2 remote-access tooling (Storm-3358), matching a vetting-roster kit and hunting rule. Do not log in; treat as attacker infrastructure.

Risk Factors (4)
Known malicious C2 console kit (Wisp C2 / Storm-3358 tooling) confirmed by vetted kit roster and hunting rule
Credential entry form (password field) gating access to attacker command-and-control infrastructure
Hosted directly on a bare IP address (213.111.150.145) with no domain, no TLS identity and no reputation
Content describes node/listener/task management, the functional vocabulary of a C2 server panel
Domain age information unavailable

Details

Page Title

喜羊羊控制台

Scan Type

public

Domain Name Analysis

The domain name '213.111.150.145' uses an unknown top-level domain with no subdomain. Count 15 characters in '213.111.150.145' holding 0 vowels versus 0 consonants; it also includes twelve digits. Breaking it apart gives four words: 213, 111, 150, 145. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://213.111.150.145/

Page Load Overview

0.36s
Total Load Time
178 KB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:162 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain92% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
92%
adult content
72%
finance banking
66%
healthcare medical
65%
technology software
64%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6213.111.150.145Kyiv, Kyiv City, Ukraine
AS6698Virtual Systems LLC
61--

Detected Technologies2

Pythonv3.12.3
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBB19832A17C7A2F41555BE956E2B2E9311F124FC389803C78785BA48F96FD1BC53A28

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:xMNPTimCptEhpVm9Hv0FSJa8VTFZVXxuIaw:cYtGpVmW+TjBWw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5398:AlAoFBBBkgKkNQAAABAABSEFGCeABSBYMRmujgAMQhAAQUQBCIEIGAIbQAEAQIEAmEAGhoAQAAWgUCAgwgANBW0QACAAAIhC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00707c787c3d0303
Perceptual Hash:c7c23c1a676d9a98
Difference Hash:8ac4c842c9e9460e
Wavelet Hash:40f07c7c3f3f2303
Color Hash:#937c1f

Other Hashes

Crop Resistant:8ac4c842c9e9460e

Scan History

Scan history not available

Unable to load historical scan data