EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of grabixpro.trade

Detection Info

https://grabixpro.trade/
Detected Brand
Grabix Pro
Country
International
Confidence
95%
HTTP Status
200
Report ID
1d81f94f-503…
Analyzed
2026-08-07 11:23

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T12141942311045D2BA18343C9F760B67EB2D74386CA056518D5FE43B9C665D45FC372E4
CONTENT ssdeep
48:bX8jBNTNmTNM9w0pD6ZR5BnqWiQRnkgB51GIiEHLTxeQx:Lc7wmD6ZZnWQRn7DxeE

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
db5e16191b263c99
VISUAL aHash
083cffffffffe700
VISUAL dHash
7048a0aa52080c0e
VISUAL wHash
0018ffffefdf0000
VISUAL colorHash
07003000180
VISUAL cropResistant
7048a0aa52080c0e

Code Analysis

Risk Score 3/100
Threat Level ALTO
⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing Gate
• Target: Grabix Pro users
• Method: Bot detection bypass
• Exfil: Unknown (hidden behind gate)
• Indicators: New domain, obfuscated JS, suspicious gate
• Risk: High

🔒 Obfuscation Detected

  • unescape

📡 API Calls Detected

  • POST

📊 Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Domain Age
Domain is only 14 days old.
Obfuscation
Detection of obfuscated JS (unescape) to hide code.
Phishing Gate
Bot protection gate used to evade security scanners.

🔬 Comprehensive Threat Analysis

Threat Type
Grabix Pro Phishing Landing Page
Target
Grabix Pro users (International)
Attack Method
Brand impersonation + obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • 2 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
Grabix Pro
Official Website
Unknown
Fake Service
Service login/verification

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The site uses a gatekeeper to hide its contents, likely to deliver a phishing form once the user interacts with the 'Bot Protection' check.

Secondary Method: Bot evasion

Using JS obfuscation and gating to avoid blacklist detection.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
grabixpro.trade
Registered
2026-07-23
Registrar
Unknown
Status
Active

🤖 AI-Extracted Threat Intelligence

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.