Security Scan Report: dhl-tracking.live

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is dhl-tracking.live.

Submitted URL: https://dhl-tracking.live/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Look-alike DHL tracking site on dhl-tracking.live impersonating DHL Express; Google Safe Browsing flags it for social engineering and it pushes an 'app' download — treat as phishing, do not enter data or install anything.

Risk Factors (5)
Google Safe Browsing social engineering / phishing detection
Impersonation of DHL Express on a non-official domain (dhl-tracking.live)
Deceptive app-download prompt following a tracking lookup ('browser not compatible')
Typosquat-style look-alike hostname combining the brand with 'tracking'
No verifiable corporate identity; only a copied DHL legal footer
Domain age information unavailable

Details

Page Title

DHL Seguimiento — ¿Dónde está mi paquete?

Scan Type

public

Domain Name Analysis

You're looking at domain 'dhl-tracking.live' on the .live top-level domain and has no subdomain. The second-level label 'dhl-tracking' is 12 characters long with two vowels and nine consonants; bonus characters include one hyphen. Word splitting yields two words: dhl, tracking. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

FD LILI LT Express — España = TM {£—— ‘—} Sigue tu envio Introduce tu número de seguimiento de DHL Express (10 dígitos) EJ: 4852167390 Al rastrear tu envío aceptas nuestros Términos y Condiciones...

Page Load Overview

0.78s
Total Load Time
5 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:1,015 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism59% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
59%
technology software
47%
education learning
47%
government public service
44%
adult content
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
023.45.110.110Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
23--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6F1B77372DA002975ABE4A5319497CE7204C507C44BC998FFBD11A4CBD6E923A3668C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:p4D7f5LpiA81Lwi8bSbwNsl5kOAFEh380f:p2J8ybK2BOAFEhs0f

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7791:pvIEZEBBgYiIHENETgYAkGAaM1SMoDQmcEyMcaQBvFTAhB0AoCD8VHAL0gFovGgBBgZiaAhMkU9lCsCAAAIZBTGSgBQIQDjA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffff0000ffffff
Perceptual Hash:e474b91b1999f464
Difference Hash:9207040a30000000
Wavelet Hash:00c3c30000ffffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data