Security Scan: CyberStrikeAI

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a91d5fe2-a59b-4211-8564-2588740d493d Domain and IP registration (RDAP)/api/v1/rdap/a91d5fe2-a59b-4211-8564-2588740d493dHow often this domain was scanned/api/v1/domain/stats/csai.hkinfosecurity.com Scan history for this domain/api/v1/domain/history/csai.hkinfosecurity.com?limit=15

This website contacted 10 IPs in 4 countries across 6 domains to perform 76 HTTP transactions. The main domain is hkinfosecurity.com and was registered 1 year 9 months ago.

Submitted URL: https://csai.hkinfosecurity.com/

Effective URL:

https://login.microsoftonline.com/a43e0edf-6561-4df7-99e8-a19ac0c75ba3...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Offensive-security toolkit (C2, WebShell, payload generation) whose domain is flagged as malicious 'cyberstrikeai' by two threat-intel feeds. No impersonation or credential theft against visitors, but treat as untrusted.

Risk Factors (4)

Multi-source threat-intel designation of the domain as 'cyberstrikeai (malicious)' matching the site's own product name

Site provides offensive tooling (C2 configuration, WebShell file management, payload/Beacon compilation, session hijacking workflows)

Unranked domain with insufficient independent legitimacy signals (legitimacy score 30/100)

Large number of password/username fields rendered in the DOM under a single unranked app

Safety Factors (6)

No brand impersonation — the page self-brands as CyberStrikeAI and does not present itself as another organisation

No cross-origin credential forms and no credential exfiltration detected; OAuth credentials are handled on Microsoft's own login.microsoftonline.com domain

No JavaScript hunting rule malware, no high-precision native hunting-rule hits, no Suricata IDS alerts, no known phishing kit in the kit roster

Only third-party script host is Microsoft analytics (browser.events.data.microsoft.com) plus static.cloudflareinsights.com — normal infrastructure

Has API documentation and a GitHub link, and the parent registrant is an infosecurity company rather than an anonymous throwaway

Established domain (8881 days old) with no strong malicious indicators — risk clamped from 7 to 5

Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Favicon Hash

MMH3: -2057558656

MD5: 12e3dac858061d088023b2bd48e2fa96

Domain Name Analysis

The domain name 'csai.hkinfosecurity.com' uses the commercial generic top-level domain (.com), featuring subdomain 'csai'. Its registrable label 'hkinfosecurity' stretches across 14 characters holding five vowels versus nine consonants. Splitting it apart reveals 3 words: hk, info, security. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.78s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:17,326 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software80% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

80%

cryptocurrency blockchain

73%

documentation technical

46%

government public service

46%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	104.21.79.159Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.67.146.121Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	40.126.31.71Office365 · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
7	23.207.210.136Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	20.190.159.23Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
7	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
7	40.126.32.74Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
7	74.151.238.96Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
76	10	-	-