SafeMode - Analysis: rewards-ff-garena-com.top

Visual Capture

Detection Info

http://rewards-ff-garena-com.top/freefire

Detected Brand

Garena Free Fire

Country

International

Confidence

100%

HTTP Status

200

Report ID

04401e3f-7a8…

Analyzed

2025-12-26 03:48

Final URL (after redirects)

https://expireddomains.com/domain/rewards-ff-garena-com.top

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T111F20DA5C190953B07F382E6B7B2772BB3D2D189CE43060A07FD83494BE6C92ED27559
CONTENT ssdeep	384:UFizcCfBnnnszicvKf0RtX7cEamDMo4h9Cwym2wkZrGeMt+hFtJAcJ4EWXqNRIm2:UFizcCpnnnhfSOrgFtJVPjg

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	bf2f6f5590d0c0d0
VISUAL aHash	8081ffffffffffff
VISUAL dHash	2a07319c9a525181
VISUAL wHash	000081ff8faba9ff

Code Analysis

Risk Score 70/100

Threat Level CRITICAL

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing site impersonating Garena Free Fire offering fake rewards.
• Target: Garena Free Fire players.
• Method: Luring users with promises of in-game rewards to potentially steal accounts or distribute malware.
• Exfil: Likely harvesting credentials or personal data if the site contains input forms (not visible in screenshot).
• Indicators: Suspicious domain name containing "rewards" and "garena", very recent registration, not the official Garena website.
• Risk: HIGH - Potential account theft and malware distribution.