Phishing Analysis
Detailed analysis of captured phishing page
90
Risk Score
High Risk
Threat Level: BAJO
• Impersonating: DPD
- • Threat: Package delivery scam attempt.
- • Target: Individuals awaiting DPD package deliveries.
- • Method: Attempts to get the user to schedule a new delivery.
- • Exfil: Likely to get PII.
- • Indicators: The image has a valid DPD tracking URL.
- • Risk: LOW - Potential scam but not explicitly malicious.
⚠ Risk Factors
- Brand impersonation of DPD on non-official domain
- Contains 4 credential harvesting form(s)
- Credential harvesting indicators detected
- Banking fraud indicators detected
Visual Capture
No screenshot available
Detection Info
https://138-68-183-9.cprapid.com/de/update.php
Detected Brand
DPD
Country
International
Confidence
100%
HTTP Status
200
Report ID
6277355f-949…
Analyzed
2025-12-31 23:21
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A2B2027094B5B63F009F7391A7386709A3D39783CB520BE567F8936D4B8AE84DC23169 |
|
CONTENT
ssdeep
|
192:bixLoxwz77qKHv/ySchJrVUmZGko5XTCReWyRMOsUFf9kIT/JO:mx8xw7pvKpJrVUIGkc+TxFUH/JO |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bcc3c33c83693cc3 |
|
VISUAL
aHash
|
ffffffc3df8181ff |
|
VISUAL
dHash
|
39000027292b1342 |
|
VISUAL
wHash
|
8fffff8181818189 |
|
VISUAL
colorHash
|
07000000007 |
|
VISUAL
cropResistant
|
39000027292b1342,0000db6464649b24 |
Code Analysis
Risk Score
90/100
Threat Level
BAJO
🎣 Credential Harvester
🎣 Banking
🔬 Threat Analysis Report
• Threat: Package delivery scam attempt.
• Target: Individuals awaiting DPD package deliveries.
• Method: Attempts to get the user to schedule a new delivery.
• Exfil: Likely to get PII.
• Indicators: The image has a valid DPD tracking URL.
• Risk: LOW - Potential scam but not explicitly malicious.
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
DPD
https://212-227-48-175.cprapid.com/de/update.php
Jan 07, 2026
DPD
https://138-68-183-9.cprapid.com/de/update.php
Dec 31, 2025
DPD
https://217-160-164-192.cprapid.com/de/update.php?g1hdiel1pc...
Dec 30, 2025
DPD
https://69-164-193-72.cprapid.com/de/update.php
Dec 30, 2025
DPD
https://72-146-195-11.cprapid.com/ch/update.php?38acq5nykn6y...
Dec 30, 2025
Scan History for 138-68-183-9.cprapid.com
Found 4 other scans for this domain