Security Scan Report: d33wubrfki0l68.cloudfront.net

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 7 HTTP transactions. The main domain is cloudfront.net and was registered 18 years ago.

Submitted URL: https://d33wubrfki0l68.cloudfront.net/085027dc-0b15-49e4-ab52-2bdc1cbaba51/dhl.html#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

DHL Express-branded credential-phishing page hosted on cloudfront.net with a victim email token in the URL; it harvests email and password. Do not enter credentials.

Risk Factors (5)
Brand impersonation of DHL Express on a non-DHL cloudfront.net host
Login form collecting email and password
Victim email token ([email protected]) in the URL fragment indicating a targeted credential-phishing lure
Cloud-storage hosting commonly used for throwaway phishing pages
Single-source phishing threat-intelligence match on the primary domain
Domain age information unavailable

Details

Page Title

DHL EXpress

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'd33wubrfki0l68.cloudfront.net' is registered, featuring subdomain 'd33wubrfki0l68'. The registrable portion 'cloudfront' spans 10 characters with 3 vowels and seven consonants. Tokenizing the label suggests two words: cloud, front. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

_ =z), (4 DHL Express Commerce Features Integrations Support About us DHLExpress |. ¥. SHIP FROM ONE zoe P L A C E & Password The DHL Express Commerce platform has everything Psion you need to man...

Page Load Overview

0.64s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:99 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software63% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
63%
e-commerce shopping
62%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
218.64.16.43Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.64.16.223Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
118.64.16.66Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
76--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103E1830665A715963503C47877D333813225C003AC0AD8657BDD63AC9FDAE81AEB2BCE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:77vCxEMD2NF2HYN9OkuUueJHYeQ76Dm8vZ9DN:yp4dureFDDN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6829:IITqOAgRYKCIkZUCclgAKCACqGoBIBIAwDUYxSYmuaIHQIAQjECgAAACAQYLKBVIFFOxNRIEQEGI0XEQI4BQESOhBfqRQFBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00b4b9b9f3f9f0f0
Perceptual Hash:cf9b6690b4590967
Difference Hash:ad65633347636367
Wavelet Hash:00b4b899fbf8f0f0
Color Hash:07200030000

Scan History

Scan history not available

Unable to load historical scan data