Security Scan Report: htmarketing.net

Redirected to: https://htmarketing.net/index.php/login

Site favicon
Submitted: Nov 1, 2025, 5:20:28 AMCompleted: Nov 1, 2025, 5:21:49 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 1 domain to perform 28 HTTP transactions. The main domain is htmarketing.net and was registered NaN years ago.

Submitted URL: https://htmarketing.net/

Effective URL: https://htmarketing.net/index.php/loginRedirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New, unranked site mimicking Nextcloud login; confirmed phishing scam.

Risk Factors
Brand impersonation (Nextcloud) on a newly registered domain
Credential harvesting form (username/email + password)
Domain age < 7 days (critical risk)
Unranked/low‑reputation domain
Lack of any legitimate branding or verification
Domain age information unavailable

Details

Page Title

Login – Nextcloud

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate

(50%)

Domain Information

Within the network infrastructure generic top-level domain (.net), 'htmarketing.net' is registered. The core label 'htmarketing' covers 11 characters with 3 vowels and 8 consonants. Breaking it apart gives 2 words: ht, marketing. Median word length is 5.5 characters. 'ht' most often appears in English. You will also see it in Vietnamese and Chinese (Pinyin) contexts. Net impression: English phrase.

Screenshot

Security scan screenshot of https://htmarketing.net/

Page Load Overview

64.66s
Total Load Time
28
HTTP Requests
1
Domains
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:278 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: webapp
Method: structural

All Detected Categories

corporate
50%

Detected Features

Login Form
Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7172.67.193.70United States
AS13335CLOUDFLARENET
7104.21.20.177United States
AS13335CLOUDFLARENET
72606:4700:3033::6815:14b1United States
AS13335CLOUDFLARENET
72606:4700:3035::ac43:c146United States
AS13335CLOUDFLARENET
284--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T194620B03A0461E3D9523C5D4F1A4BE2992DFFB46EE4014889F750CAF0AD3D6772296DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BgbdEsdvxqvR6tO+3eGEVmsriDsDw9xC4NuXrLpVeXE5BixW:BgKsBxqvRp+3eGiGv2pVeXE5BiQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15415:QBs3tGGAAYBYESAdAQBoUwC5ZHaACMIHGUgAAykGoSJK4FmAwCBSHBhlIQAAYgIATHQgjgoGsKAGOmDLCAEAmCJgOQNAVKYg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c383838143c38
Perceptual Hash:cdc933362d666cc4
Difference Hash:6070f2f2e0e4e4e0
Wavelet Hash:203c783c3e3c7e3c
Color Hash:#4084bf

Scan History

Scan history not available

Unable to load historical scan data