Security Scan Report: 158.247.253.149

Redirected to:
https://artex.zhib998.com/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 69 HTTP transactions. The main domain is zhib998.com and was registered 2 months ago.

Submitted URL: http://158.247.253.149/

Effective URL:
https://artex.zhib998.com/login
Redirected

AI Security Verdict

High Risk

Confidence: 55%

7
Risk Score

Self-branded Chinese-language 'ARTEX' pentest-console login with a same-site password form and no impersonation or exfiltration. Only evidence is a single-source, unverified 'malicious' threat-intel tag; unproven but worth caution.

Risk Factors (3)
Unverified single-source threat-intel reports (ThreatBook / static) naming the domain and its IP as malicious — no second feed or technical evidence corroborates them
Password field present in the DOM but not rendered in the captured screenshot
Login gateway on a domain whose registration age and reputation could not be established
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

Domain '158.247.253.149' uses an unknown top-level domain while skipping any subdomain. The core label '158.247.253.149' covers 15 characters split between zero vowels and zero consonants, plus 12 digits. Splitting it apart reveals four words: 158, 247, 253, 149. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://158.247.253.149/

Page Load Overview

4.62s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:52 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software61% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
61%
cryptocurrency blockchain
38%
phishing scam
36%
documentation technical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
69158.247.253.149Seoul, Seoul, South Korea
AS20473The Constant Company, LLC
691--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FF03A505BC08E6606C3BED0D96BD5E39C058F8728A318468F14DC98E8BD5BF627E5ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:UpamVXmge7Mu3kcoZh1V5x0rGV4xksc64Jysq7vFr+vz+vl1LNFyfB2LZF6G:yfebx/c64Jysq7vMvyvl1ZFd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40990:amDGAoDMIAAgZsTBUHBYgZAQosCQHRBIEbCAK6IgUEIAkUihnHLT4ExiADMGYijBLmGNABO4ANHAhRECmUBRAqyog7DAkEqr

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92976de0922f6d
Difference Hash:747476f6f7777076
Wavelet Hash:1f1f1f1311111f1f
Color Hash:#3a6778

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data