Security Scan Report: couriersplease.addliig.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is addliig.com and was registered 4 days ago.

Submitted URL: https://couriersplease.addliig.com/

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

CouriersPlease brand label placed on a 3-day-old unrelated domain (addliig.com) — a deceptive-hostname pattern consistent with phishing; real content is hidden behind a challenge wall.

Risk Factors (4)
Brand name of a different entity used as subdomain on an unrelated, 3-day-old domain
Newly registered domain (3 days) with no reputation
Unranked domain hosting a brand-bearing hostname
Real page content hidden behind a bot-protection challenge, preventing verification of what is ultimately served
Safety Factors (5)
No Indicators of Compromise matched against the scanned page or its resources
No JavaScript malware patterns or high-precision hunting-rule hits detected
No network IDS alerts recorded
No cross-origin credential exfiltration observed in the captured scripts
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Verify you are human

Scan Type

public

Domain Name Analysis

The domain name 'couriersplease.addliig.com' uses the commercial generic top-level domain (.com), featuring subdomain 'couriersplease'. The second-level label 'addliig' is 7 characters long holding 3 vowels versus 4 consonants. Splitting it apart reveals three words: add, li, ig. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://couriersplease.addliig.com/

Page Load Overview

2.05s
Total Load Time
14 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:353 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
59%
adult content
32%
government public service
31%
documentation technical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
547.79.39.190Tokyo, Tokyo, Japan
AS45102Alibaba (US) Technology Co., Ltd.
51--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144F1526B67F3116A7C17A0797BE71A4636A4C403C11AC9A47EDC138DCF896E1CC8138C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nhGicWJc8mk/QZMLFrWcXBrxjCfn81dV8O+37oYdUN47Rx5UQFGXRUYlNPz:hpc8V4ZgFxRVE81EOcgWx5jgqYlNb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7857:BlV2i0OMQBnYIAIJUA4iSAokABFAjnMJAxQorEJBwaQUwLEFAIgIACFQ0FCJ8qKBygEgSsSpKQiq7QanCIMw4EkEEAEcVJgU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffebebffffff
Perceptual Hash:e9989665699a9665
Difference Hash:0000245252240000
Wavelet Hash:0303030bcbf3f3f3
Color Hash:#8e53ac

Other Hashes

Crop Resistant:0000245252240000

Scan History

Scan history not available

Unable to load historical scan data