Security Scan Report: couriersplease.addliih.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is addliih.com and was registered 3 days ago.

Submitted URL: https://couriersplease.addliih.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Two-day-old unranked domain using 'CouriersPlease' as a subdomain to impersonate the courier brand; real content hidden behind a bot wall. Treat as a phishing lure and avoid entering any details.

Risk Factors (4)
Impersonation of the CouriersPlease brand in the hostname on a domain that is not CouriersPlease's official domain
Domain only 2 days old
Domain unranked in Cisco Umbrella top 1M
Real page hidden behind a bot-protection challenge, preventing content verification
Domain age information unavailable

Details

Page Title

Verify you are human

Scan Type

public

Domain Name Analysis

Domain 'couriersplease.addliih.com' uses the commercial generic top-level domain (.com) with subdomain 'couriersplease'. Count 7 characters in 'addliih' with 3 vowels and 4 consonants. Word splitting yields 3 words: add, lii, h. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://couriersplease.addliih.com/

Page Load Overview

1.62s
Total Load Time
14 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:353 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software58% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
58%
government public service
31%
adult content
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
547.79.39.190Tokyo, Tokyo, Japan
AS45102Alibaba (US) Technology Co., Ltd.
51--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A5F1426B67B3116A7C17A4797BE71A4636A4C403C21AC9A47EDC538DCF896E1DC8238C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nhGicWJc8mk/QZMLFrWcXBrxjCfn81dV8O+37oYdUN47Rx5UQFGXRUYlkjPz:hpc8V4ZgFxRVE81EOcgWx5jgqYlkjb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7857:BlV2i0OMQBnYIAIJUA4iSAokABNAjnMJCxQorEJBwaQUwLEFAIgIACFQ0FCJ8qKBygEgSsSpKQiq7QanCIMw4EkEEAEcVJgU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffebebffffff
Perceptual Hash:e9989665699a9665
Difference Hash:0000245252240000
Wavelet Hash:0303030bcbf3f3f3
Color Hash:#53a0ac

Other Hashes

Crop Resistant:0000245252240000

Scan History

Scan history not available

Unable to load historical scan data