Security Scan Report: niggaboo32-34796.portmap.host

Submitted: Sep 14, 2026, 1:47:43 AMCompleted: Sep 14, 2026, 1:49:02 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Scanned subdomain carries an unverified single-source XWorm malware match and sits on a port-proxy service under a CRITICAL reverse-proxy IDS alert; the page content itself is benign marketing with no forms, so risk is driven by the domain's threat-intel footprint.

Risk Factors
Content-malware (XWorm) threat-intel match on the primary scanned domain (single-source, unverified)
Randomized abuse-style subdomain hosted on a free reverse-proxy/tunneling service frequently used for C2
CRITICAL IDS alert for DNS query to a reverse proxy service
Domain age information unavailable

Details

Page Title

Portmap.io - free port forwarding solution

Scan Type

public

Domain Name Analysis

You're looking at domain 'niggaboo32-34796.portmap.host' on the .host top-level domain and includes subdomain 'niggaboo32-34796'. Count 7 characters in 'portmap' holding 2 vowels versus 5 consonants. Splitting it apart reveals 2 words: port, map. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://niggaboo32-34796.portmap.host

Page Load Overview

76.69s
Total Load Time
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,199 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software35% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.152.119Google · CDNUnited States
AS15169Google LLC
0104.26.9.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0193.161.193.99Russia
AS198134Ooo Getwifi
023.36.162.211Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0142.251.13.155Google · CDNUnited States
AS15169Google LLC
0104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
08--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19C6144074E968E0422112912F8927145CCF6770F9928A8F5F99D427E3FD0BEAD077E6E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nfqdBXGPIEBBZi3/bgbZ3ErVCrE1ne1rVfrqZNZ89ZtyZHwAF8zRSYSr/u+Cy:nmADZzDBfXwwFIJjb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3406:AlCAAACAAEAKAAhAFAAAAAAEFEkABCEIAAEQJAMDQCEQMBAAABSEBAUECKAABgAxAAAWEBKMAACggAEAACOCBAAQACAAAgAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:d3003c3c3cc7ffff
Perceptual Hash:8a0af4e48f87a5cb
Difference Hash:a7b169696996162b
Wavelet Hash:00003c3c3cc3ffff
Color Hash:#8cd279

Scan History

Scan history not available

Unable to load historical scan data