Security Scan Report: root.migu.ceo

Redirected to:
https://root.migu.ceo/#dashboard
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 59 HTTP transactions. The main domain is migu.ceo and was registered 7 months ago.

Submitted URL: https://root.migu.ceo/

Effective URL:
https://root.migu.ceo/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Exposed CyberStrikeAI console offering C2, beacon/payload building and webshell management, gated by a login; primary domain carries single-source malicious threat-intel reports and no reputation history. Do not enter credentials.

Risk Factors (5)
Unverified threat-intel reports naming the primary domain as malicious
Publicly reachable command-and-control / payload-generation console with no visible access restriction
Disguised password field (type='text' with password placeholder) among credential inputs
Unicode/mixed-script confusion detected in form fields
No domain reputation or registration-age history available
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

The domain name 'root.migu.ceo' uses the .ceo top-level domain and includes subdomain 'root'. The core label 'migu' covers 4 characters containing 2 vowels alongside 2 consonants. Splitting it apart reveals two words: mig, u. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://root.migu.ceo/

Page Load Overview

3.08s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:44,853 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
76%
documentation technical
71%
cryptocurrency blockchain
61%
government public service
33%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
29188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
592--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T173F46024A4F80836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B96F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:V2xzlTsknPHYUfzCoQSI0MbNDBKzbUktqysR0/laFQtNVo:V2NxFsSljo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:770888:hapktLip1aUCAEAzqNZEAgOAoUoCHoowAwvEiFRSFAWiBCgPCAagSgQ7FYlQgAiA4WBmIU1s7wpTzhzwU6gKBICQQ1iMigQQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffe7e7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c8104d30484d3085
Wavelet Hash:3ccfa17e7924046d
Color Hash:#40acbf

Other Hashes

Crop Resistant:c8104d30484d3085

Scan History

Scan history not available

Unable to load historical scan data