EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of bnpparibas.mitarbeitervorteile.de

Detection Info

https://bnpparibas.mitarbeitervorteile.de/login-input.action
Detected Brand
BNP Paribas
Country
International
Confidence
100%
HTTP Status
200
Report ID
08010a2c-133…
Analyzed
2026-01-01 14:35

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1F152C97251C17D37474381C291237B5EF2C2C128DB921850EAF887EA9BDECF1D969227
CONTENT ssdeep
384:+9tiaFsfsvCI5CPndzf6BTxsJEJuvSf6F93L8k:+HiaFsfsKI52dkxsqGF93L8k

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
a887359bd3b3c720
VISUAL aHash
2f9377ffff3d0000
VISUAL dHash
dd26e6f9e1611f1f
VISUAL wHash
0f0377ffff3c0000
VISUAL colorHash
07c00000000
VISUAL cropResistant
dd36e6f9b961399f,9733397c7e7efebe,693f9f9f1f1fc934

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • https://google.com/recaptcha/admin/migrate
  • login
  • https://bnpparibas.mitarbeitervorteile.de/login-input.action
  • https://bnpparibas.mitarbeitervorteile.de/switch-locale.action?locale=de&ref=https%3A%2F%2Fbnpparibas.mitarbeitervorteile.de%2Flogin-input.action
  • https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclSy8pAAAAAGUfvc_vYSfxLGaz2uiQf3GgDGRh&co=aHR0cHM6Ly9ibnBwYXJpYmFzLm1pdGFyYmVpdGVydm9ydGVpbGUuZGU6NDQz&hl=en&v=7gg7H51Q-naNfhmCP3_R47ho&size=invisible&sa=login&anchor-ms=20000&execute-ms=30000&cb=lj0w4gdhd0sn
  • https://bnpparibas.mitarbeitervorteile.de/switch-locale.action?locale=en&ref=https%3A%2F%2Fbnpparibas.mitarbeitervorteile.de%2Flogin-input.action
  • login.action

📡 API Calls Detected

  • json/web-tour-operations.action

📤 Form Action Targets

  • password-recovery.action
  • login.action

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
BNP Paribas
http://bnpparibas.mitarbeitervorteile.de
Dec 31, 2025

Scan History for bnpparibas.mitarbeitervorteile.de

Found 2 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.