Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
http://zarabuteemos.shop/wp-content/prevvx/conectt/docs/GlobalSources
Detected Brand
DHL
Country
International
Confidence
95%
HTTP Status
200
Report ID
d40c9632-f0e…
Analyzed
2026-01-23 12:00
Final URL (after redirects)
http://zarabuteemos.shop/wp-content/prevvx/conectt/docs/GlobalSources/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F551CAA0B3C46A5E98D0458BD1003FD5A3D0D1AA937138045E5FAF5FE8CD0F599672EE |
|
CONTENT
ssdeep
|
48:fHfaRBRRZGMB+Rv441RrVCVv7kKG6bvtXV26/+SlRdaxrbEuCDj1a:SjzBmwIukKGOvxVldHI1Aj1a |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
da4ba5a5276a4a5a |
|
VISUAL
aHash
|
ffff000000ffffff |
|
VISUAL
dHash
|
c4d939950422340c |
|
VISUAL
wHash
|
ffff00000000ffff |
|
VISUAL
colorHash
|
06000038000 |
|
VISUAL
cropResistant
|
c4d939950422340c |
Code Analysis
Risk Score
50/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🔬 Threat Analysis Report
• Threat: Credential harvesting phishing kit
• Target: DHL users internationally
• Method: Fake login form stealing passwords
• Exfil: Data sent to suspicious PHP file
• Indicators: Unrelated domain, suspicious form action, free hosting
• Risk: HIGH - Immediate credential theft
🔐 Credential Harvesting Forms
🎯 Kit Endpoints
- ./log1234567.php
📤 Form Action Targets
- ./log1234567.php
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
DHL
http://www.maison-orbey.de/g/o/
Mar 31, 2026
DHL
https://maison-orbey.de/g/o/
Mar 20, 2026
DHL
https://maison-orbey.de/wp-content/plugins/xleet/b/g/index2....
Mar 17, 2026
DHL
https://www.maison-orbey.de/wp-content/plugins/xleet/b/g/ind...
Mar 17, 2026
DHL
http://maison-orbey.de/g/o
Mar 17, 2026
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.