SafeMode - Analysis: centrulfamiliata.ro

Visual Capture

Detection Info

https://centrulfamiliata.ro/d%c4%b1r/.svg/oauth2

Detected Brand

Facebook

Country

International

Confidence

100%

HTTP Status

200

Report ID

1884bbac-789…

Analyzed

2025-12-26 19:56

Final URL (after redirects)

https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FAfterschoolCentrulfamiliataindex.php

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1E023B6659209B0620B7A4FF4E87D01171297599FF9B2A0A09E36F7E634C3FF5AD5E008
CONTENT ssdeep	768:pPtgr3eDYMjxJ015h5OBWa9FHqqZjispgNmzUmKE+GnIWnIjiD99jifIAair9ucx:pPtgr3YYMjxJ01zgBWa9FHqqZjispgNv

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b372ce8158ce8cbc
VISUAL aHash	efe7c7c4476fffff
VISUAL dHash	8c0f9d099dd9ce36
VISUAL wHash	67c7c0c0454f6fc3

Code Analysis

Risk Score 70/100

Threat Level CRITICAL

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Facebook credential harvesting phishing attack.
• Target: Facebook users internationally.
• Method: Presents a fake Facebook login page to steal email/phone number and password.
• Exfil: Likely to a remote server controlled by the attacker.
• Indicators: The domain name does not match the official Facebook domain, visual similarity to official page.
• Risk: HIGH - Immediate credential theft.