Security Scan Report: 198.44.51.43

Redirected to:
http://198.44.51.43:3000/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 41 HTTP transactions. The main domain is 198.44.51.43.

Submitted URL: http://198.44.51.43:3000/

Effective URL:
http://198.44.51.43:3000/login
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Raw-IP login console for an 'autonomous pentest' tool, flagged malicious by 2 corroborated threat-intel feeds on the exact IP:port. No brand impersonation or exfiltration, but avoid entering credentials.

Risk Factors (5)
Threat-intel flags for the exact IP:port serving this page, corroborated by 2 independent feeds
No domain name — direct IP hosting on port 3000, which is atypical for a legitimate product login
Password-protected console for autonomous penetration-testing tooling of unknown operator and provenance
Plain HTTP (no TLS) login form collecting a username and password
Unranked, unknown-age origin offers no independent corroboration of legitimacy
Domain age information unavailable

Details

Page Title

ARTEX — 自主渗透测试控制台

Scan Type

public

Domain Name Analysis

The domain name '198.44.51.43:3000' uses an unknown top-level domain while skipping any subdomain. The second-level label '198.44.51.43' is 12 characters long split between zero vowels and zero consonants; it also includes 9 digits. It segments into 4 words: 198, 44, 51, 43. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://198.44.51.43:3000/

Page Load Overview

3.81s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:67 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as zh

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
documentation technical
72%
cryptocurrency blockchain
62%
phishing scam
46%
government public service
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
41198.44.51.43United States
AS36352HostPapa
411--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16F23A744BC08DA606C7BBD1DA5FC5E36C058E4638A218829F14DCA8E8BD1BF613E5ED4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:P+ukkcoZh1y4pamVXmgiQC0rGV4xksc64Jysq7vFr+vz+v+BmAL1rWybwiFyfB2Q:2Febx/c64Jysq7vMvyvcmW1rF51c

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47805:CA0RUKgAyGYHBVo9lDMYBQJATAJEAEBAUQACQizUFhDdbOtAq6oUMECATyMegWVAygJFKA0ioxEZIKAAIZDFJoGQamhBEAoI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:8c92976df0926f16
Difference Hash:747476f6f7777076
Wavelet Hash:1f1f1b1313111f1f
Color Hash:#2d867b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data