SafeMode - Analysis: www.onlineservicetec.com

Visual Capture

Detection Info

https://www.onlineservicetec.com/landingpages/6641da38-5372-40e8-a9f2-f87c7b3b69de/rzx4nb3tdkrbqizgg6gjljbf-t_-fonakqgc6eajee

Detected Brand

DHL

Country

International

Confidence

99%

HTTP Status

200

Report ID

70f5f457-2ca…

Analyzed

2025-12-19 15:41

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T12693AC36EA83357F5E67A34D35B41742A2773026E01B0A6EB6BE33A157C3CD1A076B44
CONTENT ssdeep	768:FKrkX/mT1gQQFO2WWRdojeHOUc97kEo0zo9eMEi6vCLkhPSAMhoysT/7umFWrOYw:FKInpO6qkrAksXNd

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9200eced75baba43
VISUAL aHash	ff7d040400ffffff
VISUAL dHash	22d1dddcc861b800
VISUAL wHash	c23c040000ffffff
VISUAL colorHash	07281010000
VISUAL cropResistant	2236e1d5ddfddccc,c8e2153830040000,c1d5ddddfcdccce2

Code Analysis

Risk Score 70/100

Threat Level ALTO

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing
• Target: DHL customers
• Method: Fake DHL login page to steal email and password
• Exfil: Unknown (likely a custom API or email address)
• Indicators: Domain mismatch, DHL logo used without permission
• Risk: HIGH - Potential for account compromise