ScanMalware.com

Security Scan Report: delinea.ar

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5d160810-934e-4b95-8486-977693821dadDomain and IP registration (RDAP)/api/v1/rdap/5d160810-934e-4b95-8486-977693821dadHow often this domain was scanned/api/v1/domain/stats/delinea.arScan history for this domain/api/v1/domain/history/delinea.ar?limit=15
This website contacted 4 IPs in 3 countries across 3 domains to perform 23 HTTP transactions. The main domain is delinea.ar.

Submitted URL: https://delinea.ar/dh/login.htm#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

DHL/MyDHL+ login page hosted on unrelated domain delinea.ar, with a victim email token in the URL and a form harvesting email and password — a classic credential phishing kit.

Risk Factors (5)
Brand impersonation of DHL/MyDHL+ on an unrelated domain
Credential harvesting form (email + password) on impersonating host
Victim email address embedded in the URL fragment (phishing lure/tracking token)
Form action points to a non-brand handler (next.php)
DHL-branded page delivered from delinea.ar with no relationship to DHL
Domain age information unavailable

Details

Page Title

MyDHL+ Login

Scan Type

public

Domain Name Analysis

The domain 'delinea.ar' uses the Argentine country-code top-level domain (.ar) without a subdomain. Count 7 characters in 'delinea' with 4 vowels and three consonants. Breaking it apart gives 3 words: de, line, a. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

MyDHL+ Login Email Address [ falos7@1672763da0220F367a9962"7 40804508. | Password y Cancel n CONTACT AND SUPPORT LEGAL ALERTS ad Y la Help and Support Terms and Conditions Important Information Grou...

Page Load Overview

7.58s
Total Load Time
439 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-AM
Text Length:964 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism36% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
36%
government public service
29%
corporate business
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8138.219.41.153Rosario, Santa Fe, Argentina
AS27823Dattatec.com
5151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
523.200.24.158Akamai · CDNBerlin, State of Berlin, Germany
AS20940Akamai International B.V.
5151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
234--

Detected Technologies5

X-UA-Compatible
100%
PasswordField
100%
JQueryv3.1.1
100%
Apache HTTP Server
40%
jQuery CDN
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10BD40826A495312EA5A7C715B1D07B4671289633F9330EBEF16E9328CFCABD50523B4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:ZACfPKAzQRjb1Ht2oV9DSPhpvAA1+91gVhtHCdCn:ZACfPKAzQRjb1Ht2oVEfvAA1+91gVhtv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:656917:BHUDUKWAXxVhHpIgFrCkdQNE4QRpLHjQKwBI3igAAAkCCkIAQdVIIijAHcCWhAII+f0HkggQFYpuFiBLATkIQrysQE0gKekm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fffdfbd3ffffff
Perceptual Hash:9c1e1e346c6b4b4d
Difference Hash:2334f143360c0800
Wavelet Hash:009ffdff8080f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:2334f143360c0800

Scan History

Scan history not available

Unable to load historical scan data