Security Scan Report: 142.93.109.181

Redirected to:
http://142.93.109.181/login.html
Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Bare-IP 'Monitoring Panel' login matched by YARA to the Casbaneiro banking-trojan extension operator panel ('Painel Gangster'), a CRITICAL stealer kit — a credential-capture page on known malware infrastructure.

Risk Factors (4)
Analyst-vetted known malicious kit identified (Casbaneiro banking-trojan extension operator panel 'Painel Gangster')
Credential login form on a page flagged as a malicious stealer panel
Bare IP address hosting with no domain or TLS/identity context
No legitimate organizational identity, ownership disclosure, or supporting content
Domain age information unavailable

Details

Page Title

Login - Monitoring Panel

Scan Type

public

Domain Name Analysis

The domain name '142.93.109.181' uses an unknown top-level domain without a subdomain. Count 14 characters in '142.93.109.181' holding 0 vowels versus zero consonants; it also includes 11 digits. Splitting it apart reveals 4 words: 142, 93, 109, 181. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://142.93.109.181/

Page Load Overview

0.44s
Total Load Time
255 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:71 chars
Detector Agreement:67%

Website Classification

Primary Category

government public service43% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
43%
phishing/scam
40%
technology software
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.93.109.181Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
51--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12DE172A795BB0802A953A46C27D756053A2AC003910BDF3C7F6C5394DFCE6D889B379E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:4/P4f8Ez4pFI9n538/7ofO7RNmWx8HhHDm1yplxSROOZMj:WUj3l0tw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7432:IMOisBENhDQCIwJqIBcIdAVexAAEg4DLAQIEegBAHlJsAgCk0icqEgUAECZgGgAhMIEMBIDRhgKGBSAQUwjpNEoGlEAvEOgO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818181800
Perceptual Hash:cc66339966999966
Difference Hash:0028323232b2320c
Wavelet Hash:0c3c3c3c3c3c1830
Color Hash:#b0bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data