Security Scan Report: 121.36.63.40

Redirected to:
http://121.36.63.40:9999/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 71 HTTP transactions. The main domain is 121.36.63.40.

Submitted URL: http://121.36.63.40:9999/

Effective URL:
http://121.36.63.40:9999/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Self-branded ARTEX pentest console login on a bare HTTP IP. No brand impersonation, no exfiltration, no threat-intel hits, but cleartext credentials and HIGH IDS alerts for root-level response traffic warrant caution.

Risk Factors (4)
Login over unencrypted HTTP on a raw IP address (no certificate, no verifiable identity)
HIGH-severity IDS alerts indicating responses containing root-level command output
Unknown domain/IP reputation and unverifiable operator identity for a security-tool control panel
DUAL-USE/'自主渗透测试' (autonomous penetration testing) self-description — such consoles are sometimes exposed without proper access control
Safety Factors (4)
Page displays only its own name 'ARTEX'; no impersonation of another organisation's brand
Form action is same-origin (121.36.63.40:9999); no cross-origin form submission or credential exfiltration detected
No payment fields and no disguised/hidden password fields beyond the visible login password input
No Indicators of Compromise, no JavaScript malware, no known phishing kit signatures
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

Domain '121.36.63.40:9999' uses an unknown top-level domain without a subdomain. The core label '121.36.63.40' covers 12 characters holding zero vowels versus zero consonants; it also includes 9 digits. Segmentation suggests 4 words: 121, 36, 63, 40. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://121.36.63.40:9999/

Page Load Overview

2.08s
Total Load Time
5.2 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:67 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
72%
cryptocurrency blockchain
62%
phishing scam
46%
government public service
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
71121.36.63.40Beijing, Beijing, China
AS55990Huawei Cloud Service data center
711--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11213A505BC08E6606C3BED0D96BD5E39C058B8738A358468F14DC98D8BD1BF627E9ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7gu8kcoZh1V5x0rGV4xksc64Jysq7vFr+vz+v+BmAL1vXNFyfB2LZFH:Rfebx/c64Jysq7vMvyvcmW11Fz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42737:ioZYIBIkgGSGUIoIhAFBh0AIbpICAakAMVU5RRQ4JgAiE8IbAGGKiUB4LHBcgMyGBOrGAhhQRxRJsEYkSCDJBCEVFwAXggCJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c921f6df0930f96
Difference Hash:747476b6b7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#e06cd0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data