Security Scan Report: sharemyhtml.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 10 domains to perform 13 HTTP transactions. The main domain is sharemyhtml.com and was registered 7 months ago.

Submitted URL: https://sharemyhtml.com/p/O4whmC0yNV

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Docusign login page on sharemyhtml.com with five credential forms and a Telegram bot token for exfiltration - a clear phishing kit impersonating Docusign.

Risk Factors (7)
Brand impersonation of Docusign on an unrelated, unranked domain
Five credential (email + password) forms collecting logins
Telegram bot token in inline script enabling silent credential exfiltration
Obfuscated provider-choice login flow ('Sign in with Outlook/Office365/Aol/Yahoo') typical of phishing kits
Domain not in Cisco Umbrella top 1M; served as a throwaway HTML paste host
Phishing threat-intelligence match on the primary domain
Visitor IP harvesting via api.ipify.org
Domain age information unavailable

Details

Page Title

Docusign | #1 in Electronic Signature and Intelligent Agreement Managemen

Scan Type

public

Domain Name Analysis

Domain 'sharemyhtml.com' uses the commercial generic top-level domain (.com). The registrable portion 'sharemyhtml' spans 11 characters split between two vowels and 9 consonants. It segments into 3 words: share, my, html. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sharemyhtml.com/p/O4whmC0yNV

Page Load Overview

1.06s
Total Load Time
333 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:815 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
69%
documentation technical
66%
phishing scam
31%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1334.111.179.208Google · CDNKansas City, Missouri, United States
AS396982Google LLC
0104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0184.24.77.57Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0172.64.147.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.13.113Google · CDNUnited States
AS15169Google LLC
0104.26.7.244Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
013.35.58.56Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
0104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
03.33.186.135Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1318--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T193E22B9E33A314BE4E43D4E6F286EA4D7055809BEF19C9CA358C42957FE2C5398E1389

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CY0hL7mjSFajJLPD8HqoDdH1KD8Hv/CnoEUImACnoIjDdH9hCnofTAtCnopYpCnt:CY0hnmhDQHqoRH1KQHJmZaRHprcCpgym

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:32471:gALBZUwK4mECATKAeGCliAk2ImKZIAEBgBBERECt0oACsRgDSCkiCDFAAAjEKThogKwhcCQQQgGBEkmYFMBDIAJABLE6SBID

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7c7f67e767675f7f
Perceptual Hash:a6d8d86666d84376
Difference Hash:99ac8ccdcdcdb1f4
Wavelet Hash:2c1f072723271f1f
Color Hash:#6c9ae0

Scan History

Scan history not available

Unable to load historical scan data