Security Scan Report: 39.165.212.180

Redirected to:
https://39.165.212.180:28080/#dashboard
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 60 HTTP transactions. The main domain is 39.165.212.180.

Submitted URL: https://39.165.212.180:28080/

Effective URL:
https://39.165.212.180:28080/#dashboard
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Exposed CyberStrikeAI offensive-security/C2 console on a raw IP, whose own address carries a (single-source, unverified) malicious reputation flag; login page with 23 password fields and one disguised password field. Do not enter credentials.

Risk Factors (6)
Threat-intelligence flag on the site's own IP address as 'cyberstrikeai (malicious)' (single-source, unverified)
Exposed post-exploitation tooling on the public internet: C2 listener/session management, beacon builder, web-shell management, payload generator
Credential login gate on a bare IP address with no identifiable owner, company or certificate-backed domain
Disguised password field (text input with password placeholder) detected in form markup
Unicode confusion / mixed-script characters detected in form fields
Unranked host with no reputation history
Domain age information unavailable

Details

Page Title

CyberStrikeAI

Scan Type

public

Domain Name Analysis

The domain name '39.165.212.180:28080' uses an unknown top-level domain. The core label '39.165.212.180' covers 14 characters split between zero vowels and zero consonants; bonus characters include eleven digits. Splitting it apart reveals 4 words: 39, 165, 212, 180. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

[Barres | [ cu | [ QD system | | @engin | | + | | a | bs) CyberStrikeAl | < || Dashboard @ Lastupdated - | Refresh | WORKSPACE SECURITY OPERATIONS Running conversations Total vulnerabilities fo)...

Page Load Overview

17.35s
Total Load Time
10.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:45,584 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
69%
cryptocurrency blockchain
60%
government public service
31%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6039.165.212.180China
AS24445Henan Mobile Communications Co.,Ltd
601--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104F46024A4F81836419B46DEB0A87B133AA5F30BD6890054776E4BF44FE7CE1E51B92F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:L2Az4TskQlHYUfzChQSI0bbNDBKzbUktqysRWu/laFQtN4:L2eeFPdlG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:777526:BEAtWgCGWCtLQQkWENIvcAXICAiGQiEhHDJiCACVZZkgBYgSwbCiwMhEhAg6FAmGNkS6SBVACgqCyjUIvLFWhoJRACikUWAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffe7ffffe7ffff
Perceptual Hash:a3d98d66898d6699
Difference Hash:c0104d30904d3089
Wavelet Hash:3ccfa17e7924046d
Color Hash:N/A

Other Hashes

Crop Resistant:c0104d30904d3089

Scan History

Scan history not available

Unable to load historical scan data