ScanMalware.com

Security Scan Report: shell-666.wheree.com

Submitted: Jun 9, 2026, 8:24:55 PMCompleted: Jun 9, 2026, 8:26:06 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is shell-666.wheree.com and was registered NaN years ago.

Submitted URL: https://shell-666.wheree.com/

The Cisco Umbrella rank of the primary domain is #185,355 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 85%

2
Risk Score

The site shows no phishing, malware, or credential‑harvesting behavior and is considered low risk.

Risk Factors
Low Cisco Umbrella ranking (185,355) for a domain that does not claim a known brand
Presence of 26 eval() calls in JavaScript (suspicious but not malicious alone)
Safety Factors
Absence of login, payment, or hidden password fields
No external malicious domains referenced
Old domain age reduces likelihood of phishing kit deployment
No IDS or Suricata alerts indicating phishing or malware
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Just a moment...

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(77%)

Domain Information

You're looking at domain 'shell-666.wheree.com' on the commercial generic top-level domain (.com), featuring subdomain 'shell-666'. Its registrable label 'wheree' stretches across 6 characters containing three vowels alongside 3 consonants. Word splitting yields two words: where, e. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shell-666.wheree.com/

Page Load Overview

0.41s
Total Load Time
12
HTTP Requests
2
Domains
5 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:394 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.66.150.49United States
AS13335Cloudflare, Inc.
121--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ECD15BE3DDE2D10F57F90B9179F6B3A8D2A992050B028198E691C84EC7FDF0B511A38C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:PNy1GvmXZzIEb0EpyW87Sl7iMec3UgYU5tGQoOPo2GSq/9kOv6KWanBwLPj+EOnG:PNY2axyBjcrxbiSqVks6wne2EgkyRw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6177:mQgRCAIYhpcQhBQwJBzmUwABBAJDEAgJlQCCCFGAUOsgIABYCNBCABRACFwCYR5UIJAcRSBJiRIRIggEMAQHBYgrYVgcbgcA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfc7c7ffffffffe7
Perceptual Hash:b13132cfc6cccccc
Difference Hash:181e1c100000000c
Wavelet Hash:3c000038f3f3ffc3
Color Hash:#ac5362

Other Hashes

Crop Resistant:181e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data