SafeMode - Analysis: www.onlineservicetec.com

Visual Capture

Detection Info

https://www.onlineservicetec.com/landingpages/6641da38-5372-40e8-a9f2-f87c7b3b69de/rznx4nb3tdkrbqizgg6gjljbf-t_-fonakqgc6eajee

Detected Brand

DHL

Country

International

Confidence

99%

HTTP Status

200

Report ID

c9fc3b52-531…

Analyzed

2026-01-05 13:00

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T17D233931A1C321BB06B3DBC57D3A6745E0E3692DC2570907A7FD63A21F93D8A3569B02
CONTENT ssdeep	192:neTui3msA5gaznknenOJ6og8sNLYWlP37PMS9go+0/VvB5qeBgmZPxisoA5hgJxZ:neShOEQfn4P6B6Ag5sg95PvXMV

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9200eced75baba43
VISUAL aHash	ff7d040400ffffff
VISUAL dHash	22d1dddcc861b800
VISUAL wHash	c23c040000ffffff
VISUAL colorHash	07281010000
VISUAL cropResistant	2236e1d5ddfddccc,c8e2153830040000,c1d5ddddfcdccce2

Code Analysis

Risk Score 50/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing kit impersonating DHL
• Target: DHL customers
• Method: Fake login form steals email and password
• Exfil: Unknown (form action points to /landingpages/...)
• Indicators: Domain mismatch, form submission to unknown endpoint
• Risk: HIGH - Potential for credential theft and account compromise