SafeMode - Analysis: solutionfun.info

Visual Capture

Detection Info

https://solutionfun.info/landingpage/a3bb1d19-5ab4-4c3e-bdb1-81a39fb21c8d/wi4jqkh6-e3ld8f7pzd3xvudjrrxfbkws_tdzxzrnau

Detected Brand

DHL

Country

International

Confidence

95%

HTTP Status

200

Report ID

da8d0c54-665…

Analyzed

2026-01-03 10:21

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1D723D93462C7A57F46BA4BC6BF2D671AD2F3092DD212164366FF32710B92D87391230A
CONTENT ssdeep	192:neIuqP2coxIaTnUnun+hiQIMcNLgGlnPbn86dIQOE/1HZxyuZI2RnpicQox5Ihpp:nezhe0YnHgvKp6AgxsgN5P3X0N

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9200eced75baba43
VISUAL aHash	ff7d040400ffffff
VISUAL dHash	22d1dddcc861b800
VISUAL wHash	c23c040000ffffff
VISUAL colorHash	07281010000
VISUAL cropResistant	2236e1d5ddfddccc,c8e2153830040000,c1d5ddddfcdccce2

Code Analysis

Risk Score 50/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing.
• Target: DHL customers.
• Method: Fake DHL login page used to steal credentials.
• Exfil: Form action redirects to a suspicious URL /landingpages/cb096609-38e7-4e4f-a000-6cc6e42c474a/wi4jqkh6-e3ld8f7pzd3xvudjrrxfbkws_tdzxzrnau.
• Indicators: Domain does not match official DHL domain, form submission via JavaScript.
• Risk: HIGH - Credentials are being stolen.