Security Scan Report: sharemyhtml.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 1 country across 9 domains to perform 15 HTTP transactions. The main domain is sharemyhtml.com and was registered 7 months ago.

Submitted URL: https://sharemyhtml.com/p/[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake 'Webmail Sign-in' page on a paste host that harvests email/password and exfiltrates it to a hardcoded Telegram bot; login form plus browser-check lure and phishing threat-intel match confirm credential theft.

Risk Factors (6)
Login form capturing email and password on a shared-HTML paste host
Telegram bot exfiltration channel hardcoded in page script
Deceptive 'browser check' interstitial copied from Cloudflare styling
Visitor IP harvesting via external IP-lookup API (IDS critical alert)
Single-source phishing threat-intel report on the primary domain
Unranked domain with no legitimacy signals (score 10/100)
Domain age information unavailable

Details

Page Title

Webmail Sign-in

Scan Type

public

Domain Name Analysis

The domain 'sharemyhtml.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 11 characters in 'sharemyhtml' with 2 vowels and 9 consonants. Tokenizing the label suggests three words: share, my, html. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sharemyhtml.com/p/1Z408jz9at?eta=kelosx@b2f3645e09282edc9bc12334070a66a69ec6.org

Page Load Overview

2.77s
Total Load Time
127 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:280 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
59%
technology software
55%
news media journalism
43%
healthcare medical
40%
adult content
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
334.111.179.208Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1142.251.20.106Google · CDNUnited States
AS15169Google LLC
1142.251.127.94Google · CDNUnited States
AS15169Google LLC
1104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.105Google · CDNUnited States
AS15169Google LLC
1142.251.150.119Google · CDNUnited States
AS15169Google LLC
1104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1513--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F442F762ABF9003D3293D0E935B5A7897E36C107DE41059A397D2A944FCAE8648777CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:U7Uq6jfD9jTZLox1JJy4Cd+KJAM7R0eyiYtmfKrisLiZi4jb2UO4UWOA+:UA7X0eyijSriyiZi4jDUW8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12022:AFJCwMUAJECwhppNoVOkLEig4ENIGdASWBhTxgDHuiIHDYCBiIGRBtr12jHLRuAwwFDAEBQAygikdIAKAQkAYAy1mEIhTWEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3ffffffffff
Perceptual Hash:b13164cece9b9931
Difference Hash:0016160000000000
Wavelet Hash:fcc0c0fcf0f0f0f0
Color Hash:#879ac5

Other Hashes

Crop Resistant:0016160000000000

Scan History

Scan history not available

Unable to load historical scan data