Security Scan Report: 142.93.109.181

Redirected to:
https://142.93.109.181/
Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed malicious kit: HIGH-PRECISION YARA plus analyst-vetted kit roster identify this IP-hosted 'Monitoring Panel' login as the Casbaneiro banking-trojan browser-extension operator panel. Do not interact.

Risk Factors (4)
Known malicious kit identified by analyst-vetted kit roster (Casbaneiro / Metamorfo / Ponteiro banking trojan browser-extension operator panel)
CRITICAL YARA malware pattern match on page HTML (Casbaneiro_Painel_Gangster_Panel)
Credential-collecting login form (username + password) hosted on a bare IP with no legitimate identity
Bot-protection / client-fingerprinting mismatch between scanner and residential client
Domain age information unavailable

Details

Page Title

Login - Monitoring Panelother network

Scan Type

public

Domain Name Analysis

The domain name '142.93.109.181' uses an unknown top-level domain while skipping any subdomain. The second-level label '142.93.109.181' is 14 characters long containing 0 vowels alongside 0 consonants, along with 11 digits. Tokenizing the label suggests four words: 142, 93, 109, 181. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://142.93.109.181/

Page Load Overview

0.12s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:44%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,386 chars
Detector Agreement:67%
Language mismatch: Declared as en but detected as pt

Website Classification

Primary Category

technology software46% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
46%
documentation technical
40%
government public service
37%
finance banking
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.93.109.181Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
31--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ADE172A795BB0802A953A46C27D756053A2AC003910BDF3C7FAC5354DFCA69889B379E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:s/P4f8Ez4pFI9n538/7ofO7RNmWx8HhHDm1yplxSROOZMj:6Uj3l0tw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7447:AChQSlwBCBACUAUikUAIAQwkICApACasjWFTC7OAAwKxQNSgSCphETFCwBEkCIisBJARIUEypAFEAJSQAhCjBKBSRKKEEIKQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818181800
Perceptual Hash:cc66339966999966
Difference Hash:0028323232b2320c
Wavelet Hash:0c3c3c3c3c3c1830
Color Hash:#d25c2d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data