Security Scan Report: trackion.netlify.app

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 63 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://trackion.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake USPS/UPS tracking page on a Netlify subdomain impersonating the postal service; Google Safe Browsing flagged social engineering. Do not enter tracking details.

Risk Factors (5)
Impersonation of USPS/UPS branding on a non-official netlify.app subdomain
Google Safe Browsing Social Engineering detection
Free-hosting subdomain with unknown creation date and no domain reputation (unranked in Cisco Umbrella)
Mixed/contradictory brand names (UPS title, USPS header) indicating cloned content
Third-party resource loaded from a free-host domain flagged as suspicious
Domain age information unavailable

Details

Page Title

UPS Tracking®

Scan Type

public

Domain Name Analysis

The domain 'trackion.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'trackion'. Count 7 characters in 'netlify' holding 2 vowels versus five consonants. Tokenizing the label suggests 3 words: net, li, fy. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://trackion.netlify.app/

Page Load Overview

2.27s
Total Load Time
861 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:986 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service66% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
66%
technology software
28%
news media journalism
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1435.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
763.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
7104.16.40.28Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
72.23.244.111Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
723.37.226.224Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
723.53.43.59Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
723.222.81.40Akamai · CDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS16625Akamai Technologies, Inc.
723.37.226.241Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
638--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14BE2D847ECD10526518390DEB5A2B7286AB7C003F30DDC50B5ED919CAFE5F814EABA9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:MSWGdVmktDc21YGRcyCXfpHsP86malObvIhVVY/vh:MdGnmktJsy0RHC86magbvGVVY/vh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31634:DBAKABCQARCihZEIQYMgCM4AAKAeUEEohpE+BARChZEBpfRtE4UoeGkEiqcDUYoNskJEjNiohQqgFIQgIAM4RMMnMYJOQVSZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:80dfe6e6e7e7ba83
Perceptual Hash:f65c5cf0704363c9
Difference Hash:30324e4e0c0c720e
Wavelet Hash:c0dfc2e6e7e78081
Color Hash:#40acbf

Other Hashes

Crop Resistant:30324e4e0c0c720e

Scan History

Scan history not available

Unable to load historical scan data