Security Report: 186.244.241.174 - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b2eb508e-dddc-42d9-aa2c-0078482157ad Domain and IP registration (RDAP)/api/v1/rdap/b2eb508e-dddc-42d9-aa2c-0078482157adHow often this domain was scanned/api/v1/domain/stats/186.244.241.174 Scan history for this domain/api/v1/domain/history/186.244.241.174?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is 186.244.241.174.

Submitted URL: http://186.244.241.174/

Effective URL:

https://186.244.241.174/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Page hosts the DarkSword iOS exploit kit (Coruna wallet stealer) with a fake captcha gate and also lures users into sending TRX to a hard-coded address. Confirmed malicious — do not interact.

Risk Factors (5)

Known malicious exploit/stealer kit present on the page (DarkSword iOS exploit kit / Coruna wallet stealer)

CRITICAL YARA rule match for the DarkSword fake-captcha exploit gate

Content-malware threat-intel match on a third-party resource loaded by the page (disu.org.cn, 2 independent feeds)

Page solicits direct TRX transfers to a hard-coded wallet address

Served from a bare IP address with no domain reputation and no privacy/legal/business identity

Domain age information unavailable

Details

Page Title

TRX 能量租借 - 全网最低 0.1 TRX

Scan Type

public

Domain Name Analysis

You're looking at domain '186.244.241.174' on an unknown top-level domain without a subdomain. The registrable portion '186.244.241.174' spans 15 characters holding 0 vowels versus zero consonants, plus twelve digits. Word splitting yields four words: 186, 244, 241, 174. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.73s

Total Load Time

189 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:1,593 chars

Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain98% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

98%

government public service

97%

finance banking

97%

healthcare medical

96%

adult content

96%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	186.244.241.174	Los Angeles, California, United States	AS400619AROSSCLOUD INC.
4	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147C2D86A76F22062A067A5E13AA74B4F7764D403C40EDA7436FC449C8FC9D95CDA378C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:hochagySaE0hsmzPhLTu9AV5HtJ5t1jw5S2V2jjOxi4:hfhagySalhzPh2m3NJ5w5SfjjOD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27190:3Qw1AlczMewBINQgQBo4AibkAAGGC0CGgASCFwJAKKBA9jEwXoirlXDAgUHRsiikGnh0BEBNcFI5Kk6YZEJwAwKoYYI0MIZs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1118011919ff193d

Perceptual Hash:883c67b68b38e636

Difference Hash:31b171b1b1b17169

Wavelet Hash:011919193dff393d

Color Hash:#84ac53

Other Hashes

Crop Resistant:464646800200200e,31b171b3b1b17169

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 186.244.241.174