Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19291BBB0A482BB3701C7C2D1EF3A579FB2E88291EA43570552F0939C4FCAE5EDD61520 |
|
CONTENT
ssdeep
|
96:n7NrJJzqedDLkG1yk0/KXT+2py3Ij7miU/Adhpy1DkKB:7rJuck1DJR/Adhp+DkKB |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8e19794ed18d4e4e |
|
VISUAL
aHash
|
000b017ff630f7ff |
|
VISUAL
dHash
|
72dbdd9a646565a9 |
|
VISUAL
wHash
|
0003017ff430f7ff |
|
VISUAL
colorHash
|
07006000000 |
|
VISUAL
cropResistant
|
8282e2eaeae28282,dbdf99a4646565a9,63db1adbdffdd99e,d9e6766663697926,4c9736666d595932,adccdbb3b7bfbeb6,616c6c5e1e5e5e7c,1d06068606169e9e |
Code Analysis
📊 Risk Score Breakdown
Contributing Factors
🔬 Comprehensive Threat Analysis
⚠️ Indicators of Compromise
- Kit types: Banking
🏢 Brand Impersonation Analysis
⚔️ Attack Methodology
Primary Method: Account Takeover
The phishing site mimics Amazon's login or account management interface to trick users into entering credentials. These credentials are likely logged or transmitted to an attacker-controlled server for unauthorized access to victim accounts.
Secondary Method: Payment Theft
Once credentials are harvested, attackers may use them to make unauthorized purchases, change payment methods, or access stored payment details on the legitimate Amazon platform.
🌐 Infrastructure Indicators of Compromise
Domain Information
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for saadvy96.github.io
Found 1 other scan for this domain
