EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of www.solutionfun.info

Detection Info

http://www.solutionfun.info/landingpage/939c66c5-a2e6-4d48-93bb-6fda5e52ed17/tnuoxp6xeb_amudv8wnt5e8pvorbwllx98tes-uqs-0
Detected Brand
DHL
Country
International
Confidence
95%
HTTP Status
200
Report ID
0c138a88-f08…
Analyzed
2026-03-13 14:22
Final URL (after redirects)
https://www.solutionfun.info/landingpage/939c66c5-a2e6-4d48-93bb-6fda5e52ed17/tnuoxp6xeb_amudv8wnt5e8pvorbwllx98tes-uqs-0

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T10AE3767AA1F7173F497EB2A2B6952711A693831B92451BF399FC67890F84DCE3D07008
CONTENT ssdeep
768:jha/yEl4dJImYf+UgN08+0hn6Au4hqJ5c9XUE:jh6ssxUj+0l6Au4hqSXH

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9010edef453cba4b
VISUAL aHash
ff0d040400ffffff
VISUAL dHash
22999dbcc8218800
VISUAL wHash
c30c040400ffffff
VISUAL colorHash
07041010000
VISUAL cropResistant
3a22d9999dbd9ccc,c8e2313844000000,d9999d9dbc9cccea

Code Analysis

Risk Score 50/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Phishing
• Target: DHL customers
• Method: Impersonation of DHL login
• Exfil: /landingpages/99897ef0-5700-48f4-9c83-b686955ea6bc/tnuoxp6xeb_amudv8wnt5e8pvorbwllx98tes-uqs-0
• Indicators: Domain mismatch, form submission, brand impersonation
• Risk: HIGH

🔐 Credential Harvesting Forms

📤 Form Action Targets

  • /landingpages/99897ef0-5700-48f4-9c83-b686955ea6bc/tnuoxp6xeb_amudv8wnt5e8pvorbwllx98tes-uqs-0

📊 Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Domain Mismatch
The domain solutionfun.info is unrelated to the brand DHL.
Form Submission
The form action points to a potentially malicious URL.
Brand Impersonation
The website attempts to impersonate the DHL login page.

🔬 Comprehensive Threat Analysis

Threat Type
Credential Harvesting Kit
Target
DHL users (International)
Attack Method
Brand impersonation + credential harvesting forms
Exfiltration Channel
HTTP POST to backend
Risk Assessment
MEDIUM - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester

🏢 Brand Impersonation Analysis

Impersonated Brand
DHL
Official Website
https://www.dhl.com/
Fake Service
DHL MyDHL+ Login

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker is attempting to steal user credentials by mimicking the DHL login page and collecting the email and password.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
solutionfun.info
Registered
Unknown
Registrar
Unknown
Status
Unknown

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
DHL
https://www.solutionfun.info/landingpage/939c66c5-a2e6-4d48-...
Feb 11, 2026
 Screenshot
DHL
https://formssation.life/pages/5d65bc62-91ed-4057-977a-d3563...
Feb 08, 2026
 Screenshot
DHL Express
https://luxeavenue.boutique/pages/6c3d4209-0b3c-4a66-8505-3f...
Jan 16, 2026
 Screenshot
DHL
https://www.webfun.website/landingpages/939c66c5-a2e6-4d48-9...
Jan 05, 2026
 Screenshot
DHL
https://www.solutionfun.info/landingpage/939c66c5-a2e6-4d48-...
Jan 05, 2026

Scan History for www.solutionfun.info

Found 10 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.