ScanMalware.com

Security Scan Report: 47.242.1.128

Redirected to:
https://47.242.1.128:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/83bed7ff-ccda-410b-9b92-e7627dfc9313Domain and IP registration (RDAP)/api/v1/rdap/83bed7ff-ccda-410b-9b92-e7627dfc9313How often this domain was scanned/api/v1/domain/stats/47.242.1.128Scan history for this domain/api/v1/domain/history/47.242.1.128?limit=15
This website contacted 3 IPs in 2 countries across 2 domains to perform 72 HTTP transactions. The main domain is 47.242.1.128.

Submitted URL: http://47.242.1.128:8080/

Effective URL:
https://47.242.1.128:8080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Self-hosted offensive-security/C2 console exposed on a bare IP:8080, self-declaring beacon, payload and webshell tooling, with unverified threat-intel 'malicious' tags. Not a consumer phishing page, but not safe to engage with.

Risk Factors (5)
Self-hosted command-and-control / attack platform (beacon builder, payload generator, webshell and listener management) reachable from the open internet
Bare IP host on a non-standard port with no verifiable domain, ownership or reputation
Single-source threat-intel tags naming the host:port as malicious and the IP as a known attacker
Disguised password field (text input with password placeholder) and 23 credential/API-key inputs including proxy URLs with embedded user:pass
Unicode confusion characters in form fields
Domain age information unavailable

Details

Page Title

FalconStrike

Scan Type

public

Domain Name Analysis

The domain name '47.242.1.128:8080' uses an unknown top-level domain with no subdomain. Count 12 characters in '47.242.1.128' split between 0 vowels and zero consonants; it also includes 9 digits. Word splitting yields four words: 47, 242, 1, 128. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://47.242.1.128:8080/

Page Load Overview

8.49s
Total Load Time
9.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:46,383 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software82% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
82%
cryptocurrency blockchain
72%
documentation technical
61%
government public service
39%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2447.242.1.128Hong Kong, Hong Kong
AS45102Alibaba (US) Technology Co., Ltd.
24192.178.183.95Google · CDNUnited States
AS15169Google LLC
24142.251.14.94Google · CDNUnited States
AS15169Google LLC
723--

Detected Technologies2

Three.js
20%
Marked
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CD057124A4F80836419B46DEB0A87B133AA5F307D6890054B76E4BF44FE7CE1E51B96F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:52PZehTsknYHYYnzCnQSI0MbNDBKzbUktqysR0/laEQtNh:52RSFCSle

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:808469:EAoDAGCIGAwSyUhiFEepQVRYMMT4MxFkySDkOBAEMA6IwB5tHIAICQCEIXT2BQAdF5UhISxAWCAQIiLAECAaMICRwGGOUAOo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f0f8f818001b0700
Perceptual Hash:ccc0e3a6623d9c37
Difference Hash:868090b0a2b23646
Wavelet Hash:f0fcfc181b1f0703
Color Hash:#87c59d

Other Hashes

Crop Resistant:868090b0a2b23646

Scan History

Scan history not available

Unable to load historical scan data