Security Scan: CyberStrikeAI

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a0a94a8b-b3dc-4170-8a91-3e1823e27380 Domain and IP registration (RDAP)/api/v1/rdap/a0a94a8b-b3dc-4170-8a91-3e1823e27380How often this domain was scanned/api/v1/domain/stats/129.146.177.249 Scan history for this domain/api/v1/domain/history/129.146.177.249?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 60 HTTP transactions. The main domain is 129.146.177.249.

Submitted URL: https://129.146.177.249:8080/

Effective URL:

https://129.146.177.249:8080/#dashboard

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Exposed offensive C2/penetration framework on a bare IP, matching a single-source threat-intel report naming the host; provides payload generation, listeners, session and webshell management. Do not enter credentials or API keys.

Risk Factors (6)

Self-described command-and-control platform with payload/beacon generation, listener and implant session management, and webshell handling

Single-source threat-intel indicator match naming this exact IP:port as malicious ('cyberstrikeai')

Disguised password field (text input with a password placeholder) and hidden password field

Unicode mixed-script confusion in form fields — deliberate evasion indicator

Harvests and stores many third-party API keys/secrets and bot credentials in the browser UI

Served from a raw IP address on a non-standard port with no domain reputation

Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Favicon Hash

MMH3: -1349384020

MD5: 7d794e98f48497b767fceb032ef28e3e

Domain Name Analysis

The domain '129.146.177.249:8080' uses an unknown top-level domain without a subdomain. Its registrable label '129.146.177.249' stretches across 15 characters holding zero vowels versus 0 consonants, plus 12 digits. Segmentation suggests 4 words: 129, 146, 177, 249. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.22s

Total Load Time

10.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:45,582 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

74%

documentation technical

69%

cryptocurrency blockchain

60%

government public service

31%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
60	129.146.177.249Oracle · CLOUD	Phoenix, Arizona, United States	AS31898Oracle Corporation
60	1	-	-

Detected Technologies1

Marked

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T101F46024A4F81836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:62Az4TskQlHYUfzChQSI0bbNDBKzbUktqysRWuXlaFQtNj:62eeFPhlh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:777552:SgSgCOQRwkfnpDOhLMlAhHYgCrIkKAJgBMIWoMAQCAZKjCUGUpCCQTQhIYAE5EiRHkohZEJwQbMAAQBII4QPTk1TwQWSgCrJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffffe7ffff

Perceptual Hash:a3d98d66898d6699

Difference Hash:c0104d30904d3089

Wavelet Hash:3ccfa17c7d24046d

Color Hash:#e06cb1

Other Hashes

Crop Resistant:c0104d30904d3089

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 129.146.177.249