Security Scan Report: 1.12.74.49

Redirected to:
http://1.12.74.49:8080/#dashboard
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 1 domain to perform 38 HTTP transactions. The main domain is 1.12.74.49.

Submitted URL: http://1.12.74.49:8080/

Effective URL:
http://1.12.74.49:8080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Exposed login to an 'AI-Native C2 framework' with payload generation, beacon building and webshell management; the site's own IP:port also carries a malicious threat-intel report. Offensive C2 infrastructure — do not interact.

Risk Factors (5)
Command-and-control framework panel openly served (beacon builder, payload generator, listener/session management)
WebShell management and remote-session tooling exposed
Disguised password field and unicode confusion detected on the sign-in form
Threat-intel report naming the site's own IP:port as malicious
Served from a bare IP on port 8080 with no domain identity
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

Domain '1.12.74.49:8080' uses an unknown top-level domain with no subdomain. Count 10 characters in '1.12.74.49' holding 0 vowels versus zero consonants, along with 7 digits. Splitting it apart reveals four words: 1, 12, 74, 49. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://1.12.74.49:8080/

Page Load Overview

6.02s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:17,304 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical46% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
46%
technology software
42%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
141.12.74.49Guangzhou, Guangdong, China
AS45090Shenzhen Tencent Computer Systems Company Limited
12104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
383--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C6649724B4F8147A805746CEB5A87B172AB4F207D68A0144736E07F44FD7CD2EA2B97E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:wb2GH0rRt6k67KQSBJoQJt3NBcR2tqytJA2cmoozG:s2G8t6k67KQSBJoQJt3NBcR2tqytJA2i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:328773:gjQBAwgshSSYFyIAAIXCAkAOYgZwgBNAEQEQUxELQSLCguIcA2gAHoUXCiARkFsiiMl0YBkwOwRtAlQcWElAMDdFhBAORVYM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7ffe7e7ffff
Perceptual Hash:a29dd92273897666
Difference Hash:c0900cb0cccd3108
Wavelet Hash:3e66246664673d6c
Color Hash:#783a3a

Other Hashes

Crop Resistant:c0900cb0cccd3108

Scan History

Scan history not available

Unable to load historical scan data