Security Scan Report: couriersplease.addlir.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 11 HTTP transactions. The main domain is addlir.com and was registered 1 week ago.

Submitted URL: https://couriersplease.addlir.com/

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

CouriersPlease brand hosted as a subdomain of unrelated addlir.com behind a human-verification wall — brand impersonation with content hidden from inspection. Avoid; use couriersplease.com.au directly.

Risk Factors (4)
Deceptive hostname: CouriersPlease brand used on a third-party domain (addlir.com) that is not the brand's official domain
Real page content concealed behind a bot-protection challenge, preventing verification of forms and scripts
Domain absent from Cisco Umbrella top 1M and with unpublished age (weak prior only)
Application error page surfaced beneath the challenge
Domain age information unavailable

Details

Page Title

Verify you are human

Scan Type

public

Domain Name Analysis

You're looking at domain 'couriersplease.addlir.com' on the commercial generic top-level domain (.com), featuring subdomain 'couriersplease'. The second-level label 'addlir' is 6 characters long holding two vowels versus 4 consonants. It segments into 3 words: add, li, r. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://couriersplease.addlir.com/

Page Load Overview

2.51s
Total Load Time
301 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:32%
Script:Latin
Direction:ltr

Detection Details

Text Length:124 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
70%
documentation technical
68%
government public service
54%
cryptocurrency blockchain
50%
news media journalism
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
647.79.39.190Tokyo, Tokyo, Japan
AS45102Alibaba (US) Technology Co., Ltd.
5104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
112--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1B1760BA98304003106E9A87FF36F98AE75E507420ECDF877AD32E8DF942B15596B5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:9Bk1G7mWN+Iqi4SBhfECXZzKBCOZ5WCZW:9ug7mWAixBhfECXdKBCO/WCZW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5096:CAIBSSACARAFAAOwIAUB0AgIMAEKIjIAhgIJAAbALQAKyCFIAQCEDBECACgFJgEICOQAYAyAEFEEAKJARAIgGDICYE0KAKgR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffebebffffff
Perceptual Hash:e9989665699a9665
Difference Hash:0000245252240000
Wavelet Hash:0303030bcbf3f3f3
Color Hash:#acac53

Other Hashes

Crop Resistant:0000245252240000

Scan History

Scan history not available

Unable to load historical scan data