Security Scan Report: professionellerkurier-paketservicex.ink

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 13 HTTP transactions. The main domain is professionellerkurier-paketservicex.ink and was registered 1 week ago.

Submitted URL: https://professionellerkurier-paketservicex.ink/8k4Wv7tJ9r

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

One-day-old unranked domain imitating a courier service, flagged by Google Safe Browsing for Social Engineering and hidden behind a bot wall. Treat as active phishing: do not enter any data.

Risk Factors (5)
Google Safe Browsing Social Engineering detection (content-malware class threat, not generic reputation)
Brand-deceptive domain name imitating a courier/parcel service on a .ink TLD
Domain registered 1 day ago and unranked (weak prior, but consistent with throwaway phishing infrastructure)
Page content is gated behind a bot-protection challenge, so the delivered payload/forms cannot be inspected
Random-looking URL path /8k4Wv7tJ9r typical of one-time phishing campaign links
Domain age information unavailable

Details

Page Title

Verify you are human

Scan Type

public

Domain Name Analysis

Domain 'professionellerkurier-paketservicex.ink' uses the .ink top-level domain with no subdomain. The core label 'professionellerkurier-paketservicex' covers 35 characters containing 14 vowels alongside 20 consonants, notching 1 hyphen. Splitting it apart reveals eight words: profession, eller, kuri, er, pak, et, service, x. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://professionellerkurier-paketservicex.ink/8k4Wv7tJ9r

Page Load Overview

0.16s
Total Load Time
662 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:32%
Script:Latin
Direction:ltr

Detection Details

Text Length:124 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
68%
government public service
54%
cryptocurrency blockchain
50%
news media journalism
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.21.59.160Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.180.232Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
133--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A1A2E6C758B39072DC42A3FA1A9A31167D6110ABD562DDB87DCE05808FC652CB6F3ADC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:dSFcjlzslumallWzYgmty0wuxVxNL944AlAvnsTCC3gWkHK/f:0FcZtmallBwr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22842:gQhA6IAxUCygQipRQAA0msPIAahEMT6rBCKAEGCALpRgAkgkKoANUw1AxhkaewZcChsBBBEQVgYRAMApaQJaFDUQoIAIaCSD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffebebffffff
Perceptual Hash:e9989665699a9665
Difference Hash:0000245252240000
Wavelet Hash:0303030bcbf3f3f3
Color Hash:#9f53ac

Other Hashes

Crop Resistant:0000245252240000

Scan History

Scan history not available

Unable to load historical scan data