ScanMalware.com

Security Scan Report: 103.30.78.209

Redirected to:
http://103.30.78.209:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bddc9d76-cf43-4aba-b318-62298824fe4eDomain and IP registration (RDAP)/api/v1/rdap/bddc9d76-cf43-4aba-b318-62298824fe4eHow often this domain was scanned/api/v1/domain/stats/103.30.78.209Scan history for this domain/api/v1/domain/history/103.30.78.209?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 57 HTTP transactions. The main domain is 103.30.78.209.

Submitted URL: http://103.30.78.209:8080/

Effective URL:
http://103.30.78.209:8080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

IP-only host running an offensive C2/payload-generation console, flagged by a single unverified threat-intel source. Not a consumer scam, but treat as untrusted attack infrastructure and do not submit credentials.

Risk Factors (5)
Exposed C2 / beacon payload-generation interface reachable on a raw IP:port
Unverified single-source threat-intel attribution of the host address to a malicious tool
Disguised password field detected by the scanner
Mixed-script/confusable characters present in form content (evasion indicator)
Administrative console on an unranked, IP-only host with no published domain reputation
Domain age information unavailable

Details

Page Title

DesRedTeam

Scan Type

public

Domain Name Analysis

You're looking at domain '103.30.78.209:8080' on an unknown top-level domain. The core label '103.30.78.209' covers 13 characters split between 0 vowels and zero consonants; bonus characters include ten digits. Splitting it apart reveals four words: 103, 30, 78, 209. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://103.30.78.209:8080/

Page Load Overview

5.03s
Total Load Time
8.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:41,430 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
53%
documentation technical
51%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
57103.30.78.209Hong Kong
AS42960VH Global Limited
571--

Detected Technologies1

Marked
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143F48224A4F80836819B06DEB4A97B133AA5F307D6890054B76E4BF04FE7CE1E51B56F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:W2TG/tUCc0lYkkt9MYblzClQSIChFCJeBKziyktqy43y/lfQrTZ:W2SVG9bJIlY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:739788:IBVgCAQFBPBwAABItABKCQIcAMIIKSRIPIwJLhIIuyAZgIQSEIohLbCQMsgClAgQzgk1BHgR0kQA4Ag4KIDioQgAkPoRlAQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7ffe7e7ffff
Perceptual Hash:a3d88c7699dd2689
Difference Hash:c0504d304c4d308d
Wavelet Hash:3e7e207e7864047d
Color Hash:#3a862d

Other Hashes

Crop Resistant:c0504d304c4d308d

Scan History

Scan history not available

Unable to load historical scan data