Security Scan Report: sessionid089-dhlgateway.web.app

Submitted: Sep 27, 2026, 11:53:11 PMCompleted: Sep 27, 2026, 11:54:02 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

DHL-branded 'Track Your Shipment' page on a deceptive free-hosting subdomain (sessionid089-dhlgateway.web.app) with no legitimate DHL affiliation — brand impersonation consistent with parcel-phishing. No credential form was captured, but do not enter data or follow its prompts.

Risk Factors (5)
Brand impersonation of DHL on a non-DHL, free-hosting subdomain (deceptive hostname)
Phishing-typical 'Track Your Shipment' lure with session-id-style subdomain prefix
Unknown subdomain age on shared platform; no attributable reputation
Unranked domain claiming to front a major brand
Captcha-gated page consistent with anti-analysis kit behaviour
Domain age information unavailable

Details

Page Title

Track Your Shipment

Scan Type

public

Domain Name Analysis

Domain 'sessionid089-dhlgateway.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'sessionid089-dhlgateway'. The core label 'web' covers 3 characters with one vowel and 2 consonants. It segments into 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sessionid089-dhlgateway.web.app/

Page Load Overview

0.42s
Total Load Time
948 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:19 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.25.234.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.25.233.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
98--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124C1D6F816721D246C7AB682E46D77CD92335E43FE81386864ED524033CFDEA015BA76

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nBRYPGRZJ40aTvj6VvBBFIzvQsLE+2ZRENUAkLBI7HajKAQrEUzvQsLE+2ZRENUH:PooZ2BjgvBBfs2ZRENUAkLBI7nys2ZRN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6015:BFAAgDwICAiAMEABIQlRBFIAAVUEEATBJCEoBjIADAEN2gAIkAKC8wAcDCMgoEgA0ECEICgEAAgAAABRUAFSAUGBGsIT8ACH

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7ffffffffffffff
Perceptual Hash:e666666666666626
Difference Hash:0c00000000000000
Wavelet Hash:e7ffffff00000000
Color Hash:#7153ac

Other Hashes

Crop Resistant:0c00000000000000

Scan History

Scan history not available

Unable to load historical scan data