WEBSITE ANALYSIS REPORT

https://sharemyhtml.com/p/wb6U76vbd_

17 Oct 2026 · 06:17:06.000 UTCpublic

Report tags: suspicious telegram_bot
Submit tags: openphish

Request review

Suspicious activity

6 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:14:47.761 GET 200 document 26.8 KB 492 ms 6 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://sharemyhtml.com/p/wb6U76vbd_

IP / ASN

34.111.179.208

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (6518), with CRLF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 30 Sep 2026 · 02:56:28.131 UTC
Last seen (UTC): 17 Oct 2026 · 06:17:20.240 UTC
Times seen: 3

Size: 26.8 KB (27436 bytes)
MD5: 7b2200b069bf363137e41980bc97f3a1
SHA1: 890b385e0ad45efe7f23a81a5552090abf9362af
SHA256: e3e1819c1510cfbd8498a5c3d04c27b166649cc87f45c41e4b4fc90aa7cd52d8

Certificate information

Issuer: Let's Encrypt · YE2
Subject: sharemyhtml.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 42:A8:02:03:6B:3F:82:B0:0C:06:85:B5:D6:F8:D1:46:D9:4F:00:7A
Valid from: Thu, 20 Aug 2026 01:38:59 GMT
Valid until: Wed, 18 Nov 2026 01:38:58 GMT

Technology fingerprints

Google Cloud Trace (Performance)
Cloudflare (CDN)
jQuery:2.1.3 (JavaScript libraries)
Google Cloud (IaaS)
Google Cloud Load Balancing (Load balancers)
Bootstrap:3.3.4 (UI frameworks)
cdnjs (CDN)
Google Cloud CDN (CDN)
HSTS (Security)
Express (Web frameworks, Web servers)
Node.js (Programming languages)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Suspicious - Suspicious Javascript code	medium	Suspicious
YARAhub by abuse.ch Detects file containing Telegram Bot API	medium	malware
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /p/wb6U76vbd_ HTTP/1.1
Host: sharemyhtml.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-origin: *
cache-control: no-cache
content-length: 27436
content-type: text/html; charset=utf-8
date: Sat, 17 Oct 2026 06:14:48 GMT
etag: "7b2200b069bf363137e41980bc97f3a1"
expires: Sat, 17 Oct 2026 06:14:48 GMT
ratelimit: limit=300, remaining=299, reset=60
ratelimit-policy: 300;w=60
server: Google Frontend
set-cookie: GAESA=CsABMDAxMGRkODYwN2Q1YjE1Y2E4ODAwMmVmMDRiYzJmZDExOTM5ZDM5MWNmNDI2YjkyMmM4YmMxZWVmYWViZTcxMzA0ZDE4ZWQ4YWYyNGQ1NGQ1NmNkNjI5ZTI5OTM5ZGQwMDI1MWY4MTZhYTVmYWRjMTYxOWEyM2RhZjJjYzA3MGZlZjZlNzNlOWRlNWIzYWUyM2UxNzVmOGE5MzQ4N2I5ZGQ3MTVlNThjODFkN2IzNGUzMDI4NjAxMDlmMWExYjZiENTQ_sOUNA; expires=Mon, 16-Nov-2026 06:14:48 GMT; path=/
strict-transport-security: max-age=63072000; includeSubDomains
x-cloud-trace-context: 9d7055fdfca275cafa9478ef6420413f;o=1
x-powered-by: Express
via: 1.1 google
alt-svc: h3=":443"; ma=2592000
X-Firefox-Spdy: h2

06:14:48.676 GET 403 stylesheet 0 B 0 ms —

06:14:48.679 GET 200 stylesheet 114.6 KB 37 ms —

06:14:48.681 GET 403 stylesheet 0 B 0 ms —

06:14:48.683 GET 200 script 82.4 KB 41 ms —

06:14:48.690 GET 200 img 1.1 KB 149 ms —

06:14:48.879 GET 200 font 35.4 KB 75 ms —

06:14:48.881 GET 200 font 35.4 KB 71 ms —

06:14:48.883 GET 200 font 35.2 KB 71 ms —

06:14:48.910 GET No response subdocument 0 B 0 ms —

06:14:48.985 GET No response img 0 B 0 ms 4 alerts

https://sharemyhtml.com/p/wb6U76vbd_

Domain graph

Hostnames

Connections