Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://rewards-ff-garena-com.top/freefire
Detected Brand
Garena
Country
International
Confidence
100%
HTTP Status
200
Report ID
1c9f1453-3b1…
Analyzed
2026-01-02 19:29
Final URL (after redirects)
https://expireddomains.com/domain/rewards-ff-garena-com.top
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T121F2FCA5C190953F07B382E6B7B2772BB3D2D189CE42020A53FD83494FE6C92ED27559 |
|
CONTENT
ssdeep
|
384:UFizGCfinnnszilvKf0RtX1azcdDwCjlyqw7vZzxdMt+hFtJAnW4EWXqNRn8wfWC:UFizGC6nnnSfSm3FtJPPZ |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bf3f6e4590d0d0d0 |
|
VISUAL
aHash
|
8081ffffffffffff |
|
VISUAL
dHash
|
2a0729985a52d080 |
|
VISUAL
wHash
|
2000810eababffff |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
2a0729985a52d080,0040b08848c8b040 |
Code Analysis
Risk Score
95/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Free Fire reward phishing
• Target: Free Fire players
• Method: Site claims to offer rewards for Free Fire but the domain is not official.
• Exfil: Unknown
• Indicators: Domain impersonates Garena, rewards mentioned.
• Risk: HIGH - This likely redirects to a phishing site that attempts to steal game accounts.
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- /login
- https://cmp.gatekeeperconsent.com
- https://privacy.gatekeeperconsent.com
📡 API Calls Detected
- //identity.ezoic.com/subscribe
- GET
- https://x.com/ExpiredDomainHQ
- https://www.facebook.com/expireddomainscom/
- https://www.linkedin.com/company/expireddomainscom
- https://www.youtube.com/@ExpiredDomainscom
- https://www.instagram.com/expireddomainscom/
- https://www.tiktok.com/@expireddomainscom
- https://g.ezoic.net/detroitchicago/ezconfig
- POST
📤 Form Action Targets
- /search
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
No screenshot
Unknown
http://www.pathaksinternational.com/install
Jan 06, 2026
No screenshot
GoDaddy
https://www.pathaksinternational.com/start
Jan 05, 2026
No screenshot
GoDaddy
https://www.hebervalleyhorsesales.com/hebervalleyhorsesales/...
Jan 05, 2026
No screenshot
GoDaddy
https://steampowered.solutions
Jan 03, 2026
No screenshot
GoDaddy
https://rewards-ff-garena-com.top
Jan 02, 2026
Scan History for rewards-ff-garena-com.top
Found 3 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.