Windows Analysis Report
http://www.hongkong-post.frairza.com/

• HCA enabled
• EGA enabled
• AMSI enabled

• Successful, ratio: 100%
• Number of executed functions: 0
• Number of non-executed functions: 0

• Browse: https://www.hongkong-post.frairza.com/tracking/index.php?redirection=details

{
"brand":["DHL"],
"contains_trigger_text":false,
"trigger_text":"unknown",
"prominent_button_name":"next",
"text_input_field_labels":["unknown"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false}

{
"brand":["DHL"],
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"unknown",
"text_input_field_labels":["Address",
"Zip code",
"City",
"Date of birth (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM"],
"has_visible_qrcode":false}

{
"phishing_score":9,
"brands":"DHL",
"legit_domain":"dhl.com",
"classification":"wellknown",
"reasons":["The URL 'www.hongkong-post.frairza.com' does not match the legitimate domain 'dhl.com'.",
"The domain 'frairza.com' is not associated with DHL.",
"The URL contains 'hongkong-post',
 which is unrelated to DHL and could be an attempt to confuse users.",
"The presence of multiple input fields for sensitive information (Address,
 Zip code,
 City,
 Date of birth) is a common tactic in phishing sites to gather personal data.",
"The use of a subdomain and unrelated main domain is a common phishing tactic."],
"brand_matches":[false],
"url_match":false,
"brand_input":"DHL",
"input_fields":"Address,
 Zip code,
 City,
 Date of birth (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM/YYYY) (DD/MM"}