Security Scan Report: 207.57.120.18

Redirected to:
https://207.57.120.18:28080/#dashboard
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 61 HTTP transactions. The main domain is 207.57.120.18.

Submitted URL: http://207.57.120.18:28080/

Effective URL:
https://207.57.120.18:28080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Self-branded CyberStrikeAI console exposing C2 listeners, beacon/payload builders and webshell management from a bare IP. No impersonation or exfiltration seen, but offensive tooling plus a single-source malicious tag justifies high risk.

Risk Factors (5)
Publicly exposed command-and-control and post-exploitation console (C2 listeners, beacon builders, payload generator, webshell management) reachable without authentication on a raw IP address.
Threat-intel (single-source, unverified) labels this exact address/service as malicious, matching the framework's own name.
Bulk credential/secret harvesting UI: 23 password-type fields collecting third-party API keys and bot app secrets in one place.
Served on a non-standard high port from a bare IP with no domain identity, no TLS organization validation and no published ownership.
Unicode confusable characters present in form fields — could be legitimate bilingual UI, but it is an evasion-capable trait.
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

Within an unknown top-level domain, '207.57.120.18:28080' is registered with no subdomain. Its registrable label '207.57.120.18' stretches across 13 characters holding zero vowels versus zero consonants; bonus characters include 10 digits. Tokenizing the label suggests four words: 207, 57, 120, 18. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://207.57.120.18:28080/

Page Load Overview

7.73s
Total Load Time
10.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:45,582 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
69%
cryptocurrency blockchain
60%
government public service
31%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
61207.57.120.18United States
AS139659LUCIDACLOUD LIMITED
611--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T101F46024A4F81836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:62Az4TskQlHYUfzChQSI0bbNDBKzbUktqysRWuXlaFQtNj:62eeFPhlh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:777552:SgSgCOQRwkfnpDOhLMlAhHYgCrIkKAJgBMIWoMAQCAZKjCUGUpCCQTQhIYAE5EiRHkohZEJwQbMAAQBII4QPTk1TwQWSgCrJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffffe7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c0104d30904d3089
Wavelet Hash:3ccfa17c7d24046d
Color Hash:070000001c0

Other Hashes

Crop Resistant:c0104d30904d3089

Scan History

Scan history not available

Unable to load historical scan data