Comment by david_van_loon

The subdomain is "immich", which has crossed my mind as a potential flagging characteristic.