SafeMode - Analysis: away.vk.com

Visual Capture

Detection Info

https://away.vk.com/away.php?rh=54635185-f7f2-4aa4-84f1-46c5f7f9d4df

Detected Brand

VK

Country

Russia

Confidence

100%

HTTP Status

200

Report ID

2ccf01cf-b00…

Analyzed

2026-01-06 01:29

Final URL (after redirects)

https://away.vk.com/challenge.html?tid=cWxPSyIUl2s6PQcCVxm_qWlMmMtFrg&hash429=UeQRpzYFzCwbGhxOI4swvUTTFDdTY61sGSw0m7DgcD90dUUdEQ3UqRgwZHnk_0177txh1NsLX_McQl86Xmd0EfziuQM3JNc3Hd5fGFew_BuFT5bapyDjRCnllIgoFIUxbBbPwLjTXgFm98He&sign=rlK3fPiRi4hK5rx7XlyZkQ&back=https%3A%2F%2Faway.vk.com%2Faway.php%3Frh%3D54635185-f7f2-4aa4-84f1-46c5f7f9d4df&origin=&lang_id=

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T110D182E4AA3CA63D140F87ACCB6EF681235FA0EDF3170554678E96B10583E6CE946C14
CONTENT ssdeep	96:e35KFSe0BlTSc/Q04JvN/Un4jFSe0BlTSc/Q04JWatPTOYuFA9ed/Wqtu4:ZAN3J4JvBAN3J4J/iVW9eJW4u4

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	cccc3333cccc6633
VISUAL aHash	0000181818180000
VISUAL dHash	100c32b2b2320c10
VISUAL wHash	3c3c3c3c38383030
VISUAL colorHash	070000001c0
VISUAL cropResistant	100c32b2b2320c10

Code Analysis

Risk Score 95/100

Threat Level MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: CAPTCHA bypass/bot detection phishing.
• Target: VK (VKontakte) users.
• Method: Displays a fake 'Prove you are not a robot' CAPTCHA to bypass security measures or steal credentials.
• Exfil: Unknown, potentially credentials or bypassing security.
• Indicators: Domain mismatch (away.vk.com instead of vk.com), visual similarity to VK's branding.
• Risk: MEDIUM - Potential credential harvesting or bot manipulation.