Security Scan Report: 198.12.106.107

Redirected to:
https://198.12.106.107:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 54 HTTP transactions. The main domain is 198.12.106.107.

Submitted URL: https://198.12.106.107:8080/

Effective URL:
https://198.12.106.107:8080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unverified raw-IP host serving a C2/pentest framework (payload, beacon and WebShell tooling) behind a credential prompt, with a disguised password field, unicode evasion and a single-source malicious host indicator. Do not log in.

Risk Factors (5)
Attack tooling on-page: payload/beacon generator, WebShell manager, listener and session management, built-in command-and-control
Disguised password field (text input with password placeholder) — a classic evasion pattern
Unicode/mixed-script confusion detected in form fields
Host:port indicator reported as malicious (single-source, unverified) on the scanned address
Raw IP over port 8080 with a credential prompt and no verifiable ownership or reputation
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

The domain '198.12.106.107:8080' uses an unknown top-level domain with no subdomain. The core label '198.12.106.107' covers 14 characters with 0 vowels and zero consonants, notching eleven digits. It segments into four words: 198, 12, 106, 107. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://198.12.106.107:8080/

Page Load Overview

2.40s
Total Load Time
8.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:42,879 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
76%
documentation technical
70%
cryptocurrency blockchain
61%
government public service
33%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
54198.12.106.107Elk Grove Village, Illinois, United States
AS36352HostPapa
541--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B6F46024A4F80836419B46DEB1A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:G2CqlTsknTHYYXzCEQSI0MbNDBKzbTktqysRY/laFQtNO:G2FxFIVl8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:755979:AwaDoVCKR2LF4EIGWeSBoGgQCKQ1SRBhwBIBgCQrCJAAUwozCMEFKAIJQDIGWQYrPKBCLN0JLAYFA0KAFAdkiJWEABDpA8HQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffe7e7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c8104d30484d3085
Wavelet Hash:3ccfa17e7924046d
Color Hash:#931f3c

Other Hashes

Crop Resistant:c8104d30484d3085

Scan History

Scan history not available

Unable to load historical scan data