Security Scan Report: console.189.24.72.210.nip.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 70 HTTP transactions. The main domain is nip.io and was registered 14 years ago.

Submitted URL: https://console.189.24.72.210.nip.io/

The Cisco Umbrella rank of the primary domain is #376,334 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

This is an ordinary sign-in page on a long-established, well-ranked domain, with credentials submitted to a host the operator controls.

Risk Factors (4)
Dynamic-DNS hostname embedding a raw IP address, a common technique for rotating or hiding backend infrastructure
HIGH-severity IDS alert for a dynamic-DNS query to a nip.io domain
Self-described 'penetration testing console' served from throwaway-style infrastructure with no rendered application
Inline JavaScript uses encoding/decoding routines
Safety Factors (6)
No credential, password or payment fields on the page (verified form facts: 0 password, 0 payment, 1 non-credential form)
No threat-intelligence Indicators of Compromise against the page or its resources
No JavaScript malware patterns (hunting rule) and no known-kit roster match
No cross-origin form submissions and no credential exfiltration detected
All JavaScript served from the same origin; no third-party script hosts
No brand impersonation — the site brands itself (ARTEX), it does not present itself as another entity
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

Domain 'console.189.24.72.210.nip.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'console.189.24.72.210'. The core label 'nip' covers 3 characters holding 1 vowel versus two consonants. It segments into 1 word: nip. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://console.189.24.72.210.nip.io/

Page Load Overview

29.99s
Total Load Time
902 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Text Length:68 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
56%
healthcare medical
48%
government public service
45%
adult content
43%
cryptocurrency blockchain
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
70189.24.72.210Hong Kong, Hong Kong
AS1014NetLab Global
701--

Detected Technologies2

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A482A429B804EC62ADBA7C5C127E6C37608CA4378364C634F5CDDE690B8C97617E9ED1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dBzcTCD6ukcoZh1Q5Y8FyfB2LZFOuBRui6gof:dBz1kcoZh1Q5XFyfB2LZFI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17801:AEAhyDpQMwUuBDRKxRNFsUYAQGAARACkYUSlQIShQuoMEksDoCDiB6GBIJAmFgwA0BtggJViAcLAQIBEoOQIDggoNJoHiiKJ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b38ccc3333cccc33
Difference Hash:000000080a000000
Wavelet Hash:0f0f2f27070f0f0f
Color Hash:#d22d9b

Other Hashes

Crop Resistant:000000080a000000

Scan History

Scan history not available

Unable to load historical scan data