Security Scan: 红队内部版

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c9f9a98e-55b3-47fc-860e-aa09b8755178 Domain and IP registration (RDAP)/api/v1/rdap/c9f9a98e-55b3-47fc-860e-aa09b8755178How often this domain was scanned/api/v1/domain/stats/130.94.18.231 Scan history for this domain/api/v1/domain/history/130.94.18.231?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 54 HTTP transactions. The main domain is 130.94.18.231.

Submitted URL: http://130.94.18.231:8080/

Effective URL:

http://130.94.18.231:8080/#dashboard

Redirected

AI Security Verdict

High Risk

Confidence: 75%

Risk Score

Exposed offensive-security/C2 console with payload generator, beacon builder and webshell management on a bare, unranked IP flagged malicious by a single unverified source. Do not log in or interact.

Risk Factors (5)

Exposed framework for generating payloads/beacons and managing remote sessions (C2 infrastructure)

WebShell and listener management interfaces presented to any visitor

Disguised password field (type=text with password placeholder) and unicode confusable characters in the form

Bare IP hosting with no domain and no reputation; single-source malicious threat-intel report on that address

Chinese-language 'red team internal edition' console with no organisational attribution

Domain age information unavailable

Details

Page Title

红队内部版

Scan Type

public

Favicon Hash

MMH3: -1259956277

MD5: 0e0382f49821bb1d2f38cbe588c61be1

Domain Name Analysis

The domain '130.94.18.231:8080' uses an unknown top-level domain. The registrable portion '130.94.18.231' spans 13 characters split between 0 vowels and 0 consonants, plus ten digits. Breaking it apart gives 4 words: 130, 94, 18, 231. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.85s

Total Load Time

8.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:41,381 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical70% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

70%

technology software

67%

government public service

33%

cryptocurrency blockchain

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
54	130.94.18.231	Washington, District of Columbia, United States	AS154177LIGHT NODE LIMITED
54	1	-	-

Detected Technologies1

Marked

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19AF46024A4F80836419B46DEB1A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:22EFlTsknTHYYXzCYQSI0MbNDBKzbTktqysRY/laFQtNW:228xFIVlQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:742317:AQcGmigqAhpgGYBJAe5DUFEOhgFKcYAhdB3AimiUA0m7CRBURAIxiSLANUEO0hWEoEZQkBRYARAPHHSRdAQgwAYAkxJEgYDg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffe7e7ffff

Perceptual Hash:a3d98d62898d66d9

Difference Hash:c8100d304c4d308d

Wavelet Hash:3ecfa17e7924042d

Color Hash:#d22d4b

Other Hashes

Crop Resistant:c8100d304c4d308d

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 130.94.18.231