Security Scan: Hacker AI

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/aebc0d30-8635-4a9c-9915-164fefb9925d Domain and IP registration (RDAP)/api/v1/rdap/aebc0d30-8635-4a9c-9915-164fefb9925dHow often this domain was scanned/api/v1/domain/stats/156.225.18.252 Scan history for this domain/api/v1/domain/history/156.225.18.252?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 63 HTTP transactions. The main domain is 156.225.18.252.

Submitted URL: http://156.225.18.252:8080/

Effective URL:

https://156.225.18.252:8080/#dashboard

Redirected

AI Security Verdict

High Risk

Confidence: 75%

Risk Score

Login-gated console for a command-and-control/payload-generation platform, served on a bare IP with a single-source malicious threat-intel report; do not interact or enter credentials.

Risk Factors (4)

Exposed command-and-control and payload-generation console reachable on a raw IP address

WebShell management and beacon-payload build functionality associated with malware tooling

Disguised password field and unicode/mixed-script confusion in form fields — evasion-oriented UI traits

Single-source threat-intelligence report labelling the host as malicious ('cyberstrikeai')

Domain age information unavailable

Details

Page Title

Hacker AI

Scan Type

public

Favicon Hash

MMH3: 851880454

MD5: 831b4e01f65d2797d5484a84f0c01810

Domain Name Analysis

The domain '156.225.18.252:8080' uses an unknown top-level domain and has no subdomain. Its registrable label '156.225.18.252' stretches across 14 characters split between zero vowels and zero consonants, notching 11 digits. Breaking it apart gives four words: 156, 225, 18, 252. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.36s

Total Load Time

10.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:46,052 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

69%

documentation technical

69%

cryptocurrency blockchain

40%

government public service

30%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
63	156.225.18.252	Seychelles	AS401696cognetcloud INC
63	1	-	-

Detected Technologies1

Marked

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FAF46024A4F80836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B96F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:X2AzYTskQGHYUfzC2QSIbbbNDBKzbUktqysRWuXlaFQtNv:X2e+FChl5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:779339:CGK5EEcmpkUgxIJl2p0jxndPAABAIeDz0yACKIEkvAEUEBk8IyDrEARAUsAAYNRwNEpQWUgQlQjUcjEOyA0NQKwM27c7QIbu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffffe7ffff

Perceptual Hash:e3d98c66898d6699

Difference Hash:c0100d30904d3089

Wavelet Hash:3ecfa17c7d24042d

Color Hash:#862d2d

Other Hashes

Crop Resistant:c0100d30904d3089

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 156.225.18.252