Security Scan Report: sshhole.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 1 domain to perform 21 HTTP transactions. The main domain is sshhole.com and was registered 1 week ago.

Submitted URL: https://sshhole.com/

AI Security Verdict

Moderate Risk

Confidence: 58%

4
Risk Score

Technical article about an OpenSSH/musl password bug; the lone password box appears to be a same-origin 256-char demo with no exfiltration, but the day-old unranked domain warrants caution.

Risk Factors (3)
Domain registered ≤1 day ago and unranked in Cisco Umbrella
A password-capture field is rendered as a text input (disguised) with no accompanying username field
Unicode/character-confusion flag reported in form fields
Safety Factors (5)
Self-branding: title and meta description match the scanned domain
Extensive, coherent technical content consistent with a security research blog post
No cross-origin form submissions, no external JavaScript hosts, no credentials sent off-domain
No Indicators of Compromise, no hunting rule malware patterns, no Safe Browsing or IDS alerts
No payment fields and no email/identity collection fields
Domain age information unavailable

Details

Page Title

*sshole · sshhole.com

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sshhole.com' is registered while skipping any subdomain. The core label 'sshhole' covers 7 characters holding 2 vowels versus 5 consonants. Segmentation suggests two words: ssh, hole. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sshhole.com/

Page Load Overview

0.40s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:10,678 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software30% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
30%
cryptocurrency blockchain
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
213--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1624352B1B1ED0836E106498AE74977BABDCAA0CFDC06CA04F6ED42256F97C47A55F108

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:AII6wfo9Y4A6kAZhoa9N9j939f9j9Mp9jF95G9gO9xc9Zp9E+gKIIBdIIH3aBz:vwfoa4A6kmhoa9N9j939f9j9U9Z9E9Pn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57944:oAUnADDGEqHIjWRaDMZJ6BAyCWM6ExiqUSScQSaDMIoTAIUCAQbIABFgB6AFAzEKhGSWAFCEAUAKSgQMRCVggBGgtFKEE5BR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101713d7d210101
Perceptual Hash:8ac738389897c7c7
Difference Hash:0111c9c9c9c11101
Wavelet Hash:01017f7f7f790119
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data