Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://csdept.csassistant06.com
Detected Brand
Unknown
Country
USA
Confidence
100%
HTTP Status
200
Report ID
0a9026e9-44c…
Analyzed
2025-12-27 06:40
Final URL (after redirects)
https://login.salesforce.com/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B6433CF33A51283215E760EB74BBA78DB0B9C6296D09CCE0D0ACC9517B65ED60077F29 |
|
CONTENT
ssdeep
|
768:w3JavjqlrfFyFSK6kuSAIWgJX5kN2Q3+gy1Ln0ctsu4dzWM+4bNwQTcwL:wYqlpkqbcQ3+gOn07u4NFbNwkcc |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ce1ec33c39c3e1c1 |
|
VISUAL
aHash
|
f090f0909090f0f0 |
|
VISUAL
dHash
|
c42424242424c424 |
|
VISUAL
wHash
|
f0f0f0b0f090f0f0 |
Code Analysis
Risk Score
65/100
Threat Level
CRITICAL
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🔬 Threat Analysis Report
• Threat: Credential harvesting phishing
• Target: Salesforce users
• Method: Fake Salesforce login page stealing username and password
• Exfil: Likely to a malicious server controlled by the attacker (not visible in the screenshot)
• Indicators: Domain mismatch (csdept.csassistant06.com instead of salesforce.com)
• Risk: HIGH - Real-time credential theft
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Salesforce
http://pratiklambdatest31.blitztesting.com/
Jan 02, 2026
Unknown
http://salesforce.tumee.com
Jan 02, 2026
Unknown
http://salesforce.tumee.com/
Jan 02, 2026
No screenshot
Unknown
https://pratiklambdatest31.blitztesting.com/
Dec 30, 2025
No screenshot
Unknown
http://csdept.csassistant06.com
Dec 30, 2025
Scan History for csdept.csassistant06.com
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.