Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
http://bifrost.pl
Detected Brand
Nicsell
Country
International
Confidence
100%
HTTP Status
200
Report ID
2309f2db-d7f…
Analyzed
2026-01-01 23:53
Final URL (after redirects)
https://nicsell.com/en/domain/bifrost.pl
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T172F23472E451B92701B3D7D0D971375AF3B2A38CC9A7023677F443792AC9DA3E9120A5 |
|
CONTENT
ssdeep
|
384:us/WlKY7fUI7lQnJ8q8p+VI/o+5sVtkc4:J+sYzUI7oq5sVac4 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f87887871bd8c466 |
|
VISUAL
aHash
|
ff80808000ffffff |
|
VISUAL
dHash
|
232737930f333617 |
|
VISUAL
wHash
|
ff00000000ffffff |
|
VISUAL
colorHash
|
0e00000a400 |
|
VISUAL
cropResistant
|
232737930f333617,2186a4a44db2320c,3327253333290f27 |
Code Analysis
Risk Score
94/100
Threat Level
BAJO
🎣 Credential Harvester
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Informational page about a domain registered via Nicsell
• Target: Nicsell customers and domain investors
• Method: Displays domain information, not attempting to steal credentials or install malware
• Exfil: No data exfiltration detected.
• Indicators: The page provides legitimate domain information.
• Risk: LOW - Legitimate website content.
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- fromCharCode
- hex_escape
- unicode_escape
🎯 Kit Endpoints
- /en/login
📤 Form Action Targets
- /en/domainlist
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for bifrost.pl
Found 3 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.