SafeMode - Analysis: syed-zeeshan001.github.io

Visual Capture

Detection Info

https://syed-zeeshan001.github.io/Netflix-Clone

Detected Brand

Netflix

Country

International

Confidence

95%

HTTP Status

200

Report ID

247d7cf5-20c…

Analyzed

2026-03-02 06:39

Final URL (after redirects)

https://syed-zeeshan001.github.io/Netflix-Clone/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1CAC12C3B3101693B018342F2BB65AB0BFB938159DF9B0B6520F8C34D6FE6D49CC56689
CONTENT ssdeep	96:T6T9d+Ff2M1rxH5X1nFBFEPht3wj2C+Ff2zzKjam:WT9dgR1xH5FFBG8j2CgUG

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d4bd737e5823038c
VISUAL aHash	80c27f5f1e441020
VISUAL dHash	0fa6a6b6b0ac68cc
VISUAL wHash	80f27fdf1e741068
VISUAL colorHash	39401000000
VISUAL cropResistant	8029a6c4b9d44990,2600823232320000,0fa6a6b6b0ac68cc

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Netflix users
• Method: Impersonation via a fake login page
• Exfil: Email address
• Indicators: Free hosting, Netflix branding, email input
• Risk: HIGH

📊 Risk Score Breakdown

Total Risk Score

90/100

Contributing Factors

Free Hosting

The site is hosted on a free hosting service (github.io), often used by attackers.

Brand Impersonation

The site mimics Netflix's branding to deceive users.

🔬 Comprehensive Threat Analysis

Threat Type

Netflix Phishing Landing Page

Target

Netflix users (International)

Attack Method

Brand impersonation

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

Netflix

Official Website

https://www.netflix.com/

Fake Service

Netflix streaming service

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attackers are using a fake website that looks like Netflix to trick users into entering their email address. This is a common tactic for phishing, where the attacker will then attempt to use the collected information for various malicious activities.