Security Scan: SEUR: Envío y transporte de paquetería y mens

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4d556e9a-b646-4e22-8589-cce32ba84cba Domain and IP registration (RDAP)/api/v1/rdap/4d556e9a-b646-4e22-8589-cce32ba84cbaHow often this domain was scanned/api/v1/domain/stats/tr.ee Scan history for this domain/api/v1/domain/history/tr.ee?limit=15

This website contacted 9 IPs in 2 countries across 6 domains to perform 35 HTTP transactions. The main domain is tr.ee and was registered 16 years ago.

Submitted URL: https://tr.ee/yHsrGz

Effective URL:

https://vmi3505306.contaboserver.net/caja/reus/sen/fajo/msg.php

Redirected

The Cisco Umbrella rank of the primary domain is #145,100 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Fake SEUR parcel page reached via a shortened link that redirects to an unrelated VPS host; it uses SEUR branding, a bogus tracking number and a 7-hour deadline to push visitors toward handing over data.

Risk Factors (5)

Impersonation of the SEUR courier brand on a domain that is not the brand's official domain

Cross-domain redirect from a URL shortener to a hosting-provider IP hostname, hiding the true destination

Manufactured urgency and a countdown threat of parcel return to force user action

Fake tracking record and delivery-failure status used as a pretext for collecting personal data

Hosting on a generic VPS (contaboserver.net) with no relation to the impersonated brand

Domain age information unavailable

Details

Page Title

SEUR: Envío y transporte de paquetería y mensajería | SEUR

Scan Type

public

Favicon Hash

MMH3: -294417146

MD5: 389521731ccd816dffe17e2fdca0eb9a

Domain Name Analysis

The domain 'tr.ee' uses the Estonian country-code top-level domain (.ee) while skipping any subdomain. The second-level label 'tr' is 2 characters long holding 0 vowels versus two consonants. Splitting it apart reveals one word: tr. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.11s

Total Load Time

350 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:46%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,529 chars

Detector Agreement:75%

Website Classification

Primary Category

phishing scam50% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

phishing scam

50%

government public service

42%

blog personal website

34%

technology software

32%

corporate business

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	169.58.169.247	Lauterbourg, Grand Est, France	AS51167Contabo GmbH
3	151.101.2.133Fastly · CDN	United States	AS54113Fastly, Inc.
3	104.16.180.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	151.101.194.133Fastly · CDN	United States	AS54113Fastly, Inc.
3	104.16.179.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
35	9	-	-