ScanMalware.com

Security Scan Report: 82.29.53.133

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/13a8df72-a0a8-41b8-a504-8cae1a118f6cDomain and IP registration (RDAP)/api/v1/rdap/13a8df72-a0a8-41b8-a504-8cae1a118f6cHow often this domain was scanned/api/v1/domain/stats/82.29.53.133Scan history for this domain/api/v1/domain/history/82.29.53.133?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is 82.29.53.133.

Submitted URL: http://82.29.53.133:9137/login

AI Security Verdict

Moderate Risk

Confidence: 57%

5
Risk Score

Self-branded 'Xalgorix' operator console: a single same-origin login form with no impersonation, malware, or exfiltration signals. Unverified bare-IP host over plain HTTP raises moderate concern only.

Risk Factors (3)
Login form served over unencrypted HTTP, exposing credentials in transit
No verifiable organizational identity behind a bare IP host — no domain, no certificate context
Page advertises an 'offensive AI platform' for automated reconnaissance and exploitation without any verifiable corporate identity or licensing information
Safety Factors (5)
Form is same-origin; no third-party credential submission or exfiltration detected
No brand impersonation — site displays only its own 'Xalgorix' branding
No JavaScript malware patterns, no native-hunting rule high-precision hits, no network IDS alerts
Standard CSRF and HTTP-only session cookie protections are described in the page markup
Only one form type on the page (sign-in); no payment or sensitive data collection
Domain age information unavailable

Details

Page Title

Xalgorix — Security Scanner

Scan Type

public

Domain Name Analysis

The domain name '82.29.53.133:9137' uses an unknown top-level domain while skipping any subdomain. The registrable portion '82.29.53.133' spans 12 characters split between 0 vowels and 0 consonants, notching nine digits. Segmentation suggests four words: 82, 29, 53, 133. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://82.29.53.133:9137/login

Page Load Overview

2.77s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:409 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software39% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
682.29.53.133Draper, Utah, United States
AS142036Hosteons Pte. Ltd.
61--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10E829840740C12786D3FAB65FEC4A72CA025B542EEE34426A10D148BD6D3FF53AFAB95

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CuO8U5Q6nBOmEAUU/cxksc64Jysq7vpEFYlm:tsnB7cxksc64Jysq7vpQYlm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19017:x8RlyB7W2UgQQDcMAcqzAPCQFQCYBQkAkBAxgQRG0UfOAahKAPEE4BkqMBBC0Bt4OjEcgkIitKKIypAwrpKwJIhuEAK4Jini

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8000f0f0a6260000
Perceptual Hash:f6494994b669c696
Difference Hash:0012c48c4c44a304
Wavelet Hash:901090f6f6f0b0b0
Color Hash:38000000000

Other Hashes

Crop Resistant:a2b28acccc8a80a2,0012c48c4c44a304

Scan History

Scan history not available

Unable to load historical scan data