ScanMalware.com

Security Scan Report: 43.139.224.138

Redirected to:
https://43.139.224.138:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/95c7cdd9-1b48-4db4-947c-87d8410aae3eDomain and IP registration (RDAP)/api/v1/rdap/95c7cdd9-1b48-4db4-947c-87d8410aae3eHow often this domain was scanned/api/v1/domain/stats/43.139.224.138Scan history for this domain/api/v1/domain/history/43.139.224.138?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 62 HTTP transactions. The main domain is 43.139.224.138.

Submitted URL: https://43.139.224.138:8080/

Effective URL:
https://43.139.224.138:8080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Self-branded, IP-only admin console for offensive C2/attack tooling with a same-origin login and one unverified single-source 'malicious' tag; no phishing, impersonation or exfiltration seen, but the exposed attack platform warrants avoidance.

Risk Factors (4)
Exposed self-hosted command-and-control / offensive-security console (C2, beacon builder, payload generator, web shell and session management) accessible on a public IP
Single-source threat-intel entry naming the service at this IP:port as malicious (unverified)
No domain, no published ownership or organisational identity behind the IP; legitimacy signals essentially absent
Panel bundles third-party reconnaissance API keys (FOFA, ZoomEye, Quake, Shodan) and messaging-bot secrets in its configuration screens
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

Domain '43.139.224.138:8080' uses an unknown top-level domain with no subdomain. Count 14 characters in '43.139.224.138' with 0 vowels and zero consonants, along with eleven digits. It segments into 4 words: 43, 139, 224, 138. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://43.139.224.138:8080/

Page Load Overview

32.63s
Total Load Time
10.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:46,089 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
73%
documentation technical
69%
cryptocurrency blockchain
61%
government public service
32%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6243.139.224.138Guangzhou, Guangdong, China
AS45090Shenzhen Tencent Computer Systems Company Limited
621--

Detected Technologies1

Marked
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104F46024A4F81836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:Q2AzYTskQGHYUfzChQSIbbbNDBKzbUktqysRWuXlaFQtNv:Q2e+FLhlB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:781145:BEkmIHQaq5tESBGABsoOQIYdiGAtsMMqwLIEABoxEokwIhCGEESUAo4BUNkwAYghdbAaQBkwxBCTKUTIsJd3iYAAAAxUFIAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffffe7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c0104d30904d3089
Wavelet Hash:3ccfa17e5d24046d
Color Hash:#c5878f

Other Hashes

Crop Resistant:c0104d30904d3089

Scan History

Scan history not available

Unable to load historical scan data