ScanMalware.com

Security Scan Report: courier-app.pre.hermescloud.co.uk

Redirected to:
https://courier-app.pre.hermescloud.co.uk/auth/sign-up-link?token=unde...
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6fab8cd0-411b-487b-83db-ad552a43a49eDomain and IP registration (RDAP)/api/v1/rdap/6fab8cd0-411b-487b-83db-ad552a43a49eHow often this domain was scanned/api/v1/domain/stats/courier-app.pre.hermescloud.co.ukScan history for this domain/api/v1/domain/history/courier-app.pre.hermescloud.co.uk?limit=15
This website contacted 42 IPs in 4 countries across 22 domains to perform 506 HTTP transactions. The main domain is hermescloud.co.uk and was registered 9 years ago.

Submitted URL: https://courier-app.pre.hermescloud.co.uk/?action=sign-up-by-link

Effective URL:
https://courier-app.pre.hermescloud.co.uk/auth/sign-up-link?token=unde...
Redirected

The Cisco Umbrella rank of the primary domain is #688,514 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Pre-production Evri courier sign-up page on a 9-year-old brand-owned domain, with a broken (token=undefined) link. No forms, no credential capture, no threat-intel or malware hits; only concern is an exposed staging host.

Risk Factors (1)
Publicly reachable pre-production/staging hostname (courier-app.pre) with a broken sign-up link ('token=undefined'); an operational exposure of a non-production environment, not evidence of fraud
Safety Factors (4)
Domain is well established (approximately 9 years old) under a name matching the courier brand it serves
No forms whatsoever: no password, payment or email capture fields on the page
No Indicators of Compromise, YARA malware patterns, known-kit matches, IDS alerts or Safe Browsing findings
No cross-origin form submission and no credential exfiltration behaviour
Domain age information unavailable

Details

Page Title

Enter your password

Scan Type

public

Domain Name Analysis

The domain name 'courier-app.pre.hermescloud.co.uk' uses the United Kingdom country-code top-level domain (.co.uk), featuring subdomain 'courier-app.pre'. Its registrable label 'hermescloud' stretches across 11 characters containing four vowels alongside seven consonants. Word splitting yields 2 words: hermes, cloud. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://courier-app.pre.hermescloud.co.uk/?action=sign-up-by-link

Page Load Overview

17.32s
Total Load Time
11.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:228 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking40% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
40%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1434.253.21.114Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
123.160.150.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
12142.251.110.97Google · CDNUnited States
AS15169Google LLC
1218.244.18.112Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1213.41.51.158Aws · CLOUDCity of London, England, United Kingdom
AS16509Amazon.com, Inc.
1218.172.112.27Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1218.215.220.181Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1235.173.69.207Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
12142.251.157.119Google · CDNUnited States
AS15169Google LLC
12192.178.183.149Google · CDNUnited States
AS15169Google LLC
50642--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BC23BD2C3A0C87AE5122534B7AD2BD55E48A370F423DD474C5FF9ABCCAB0B514EA245B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:fSAHkPFiahqMgE6DAZjC4y2NW0YirlNkRiF9SFfSqKqFBEjY5zrygh6hxxFYCSpX:fS2kPA0Z6Ef6g9BVGET25

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47803:hBDjmsGCDsog1VDSRYYIKBVYAxeggCEAHngRJGAQaMNARhGgEKQAhCGBiAgJwYCJ6ygA/oiIMFgiRjUjBRWUdKqHrUsYARQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffe7ffffff
Perceptual Hash:f1594c6633199da6
Difference Hash:969130188e0c2000
Wavelet Hash:0000dcecc0c0f0f0
Color Hash:#d22d9b

Other Hashes

Crop Resistant:3018788e0e300400,8696964060909060,455108b2b20c4145

Scan History

Scan history not available

Unable to load historical scan data