ScanMalware.com

Security Scan Report: 133.18.185.129

Redirected to:
https://133.18.185.129:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a2c36d36-1d10-4d62-93bd-fb7ee162865fDomain and IP registration (RDAP)/api/v1/rdap/a2c36d36-1d10-4d62-93bd-fb7ee162865fHow often this domain was scanned/api/v1/domain/stats/133.18.185.129Scan history for this domain/api/v1/domain/history/133.18.185.129?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 63 HTTP transactions. The main domain is 133.18.185.129.

Submitted URL: http://133.18.185.129:8080/

Effective URL:
https://133.18.185.129:8080/#dashboard
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Self-hosted 'CyberStrikeAI' offensive-security console on a raw IP: own same-origin login, no impersonation, no Indicators of Compromise, no exfiltration. Risk comes from plain-HTTP exposure of C2/WebShell/admin tooling, not phishing.

Risk Factors (4)
Exposed offensive-security administration console (C2, WebShell, payload/beacon generation) hosted on a raw IP over unencrypted HTTP on port 8080
Login and API-key/secret fields served without TLS, meaning credentials and third-party API keys travel in clear text
Mixed-script (Chinese/English) UI and one text-typed field with a password placeholder indicate an inconsistently hardened build
No verifiable domain identity, no published registration age, and no public reputation record to attribute the service operator
Safety Factors (4)
Self-branding detected: page title, header and login all match the site's own name 'CyberStrikeAI' — no third-party brand is impersonated
Sign-in and configuration forms submit only to the same origin (133.18.185.129:8080); no credential exfiltration or cross-origin credential targets detected
No Indicators of Compromise, no JavaScript malware/hunting-rule patterns, no known malicious kit, and no network IDS alerts
No payment or card fields present; password fields are the tool's own API-key/account settings rather than harvested end-user credentials
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

Within an unknown top-level domain, '133.18.185.129:8080' is registered without a subdomain. The registrable portion '133.18.185.129' spans 14 characters split between zero vowels and zero consonants, along with eleven digits. Word splitting yields four words: 133, 18, 185, 129. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

CyberStrikeAl 1.7.24 Bars Ocitu Omk She o 4 < WR ERE - BIBT ries 88 ze D wie O Rehr > TPH io} TRB aa LATE v Token HE # STEM . SRA Rete = HEER . 28 v 28 HESS SELE © Are y BAP ERED RE SELE O FRER mn...

Page Load Overview

6.13s
Total Load Time
10.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:46,089 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software73% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
73%
documentation technical
69%
cryptocurrency blockchain
61%
government public service
32%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
63133.18.185.129Osaka, Osaka, Japan
AS24282KAGOYA JAPAN Inc.
631--

Detected Technologies1

Marked
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C0F46024A4F81836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:z2AzYTskQGHYUfzChQSIbbbNDBKzbUktqysRWuXlaFQtNv:z2e+FLhl5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:780815:pwaqknCKBiJUEueBDBIFSiROAKg3Exwig8tMSukASIGAF5GIJlQEGEAKgiwY1nQFFiyx6GAIEkoJVKFBEA0kqCROMwksGpbI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffffe7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c0104d30904d3089
Wavelet Hash:3ccfa17c7d24046d
Color Hash:N/A

Other Hashes

Crop Resistant:c0104d30904d3089

Scan History

Scan history not available

Unable to load historical scan data