SafeMode - Analysis: www.trackshipping.online

Visual Capture

No screenshot available

Detection Info

https://www.trackshipping.online/signin?t=eyjhbgcioijiuzi1nij9.eyj0cmfja2luz190b2tlbii6ijiyotdmotnilwnhnzqtndhjni04mdm4lwyxztiwnmnjzmzjocisimnlbgwioijodhrwczovlzixzzzqznzoetyuzxhly3v0zs1hcgkudxmtzwfzdc0ylmftyxpvbmf3cy5jb20vchjvzc9hcgkvcghpc2hpbmdjyw1wywlnbiisimnhbxbhawdux3rva2vuijoizmy0mjfizjqtmjaxns00yzljltg0ywitmjvkzjzjnwjjnmvjiiwidgvzdf90b2tlbii6zmfsc2usimv4dgvybmfsx3ryywluaw5nijpmywxzzswizglyzwn0x2rlbgl2zxj5ijp0cnvllcjpyxqioje3mzm4njgwnzgsimlzcyi6imh0dhbzoi8vyxbwlnboaxnodghyzwf0lmnvbsisimv4cci6mtc0mty0nda3oh0.rzttecjwbznoqmetfcoh4a6xgfydy74bj9vlof2bd34

Detected Brand

Unknown

Country

Unknown

Confidence

100%

HTTP Status

200

Report ID

31d9723f-be4…

Analyzed

2026-01-05 16:03

Final URL (after redirects)

https://staysafe.sophos.com/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1DFF165735908981E2A7287C4EA03715CC0D39489CA9E9E72F3ED566B55C3EB290F7339
CONTENT ssdeep	192:m+NDyj2PZqsE7ZJkjGt4AOKE4uKw+kJcWulL0KSVgwHLktvIwiG:m+NDyj2PZqsE7ZJkj44AOKE4uKwRJcWg

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b6361c9c1c9e3696
VISUAL aHash	00c3c3e7ffffff00
VISUAL dHash	22160e0e00000008
VISUAL wHash	00c3c0c0ffffbd00
VISUAL colorHash	070000001c0
VISUAL cropResistant	22160e0e00000008

Code Analysis

Risk Score 100/100

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔒 Obfuscation Detected

fromCharCode
unicode_escape

🎯 Kit Endpoints

https://pixel.wp.com/g.gif?v=ext&blog=142810899&post=11&tz=0&srv=staysafe.sophos.com&hp=vip&j=1%3A15.1.1&host=staysafe.sophos.com&ref=&fcp=0&rand=0.9482335998446504