SafeMode - Analysis: f.digital-sending.com

Visual Capture

No screenshot available

Detection Info

http://f.digital-sending.com/igit/4/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4

Detected Brand

AT&T

Country

USA

Confidence

100%

HTTP Status

200

Report ID

32df497b-c5f…

Analyzed

2025-12-22 02:42

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1879264B140A113EE3AB0C0517DD976DEAF62C0CDB73157D869BBC668B2C0867E5720B9
CONTENT ssdeep	384:TxcwNjKmzmyaCVJpCVJ0PbatdaoO64GsFrRxP1:TomzmsM+GOr9

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b3cece8c3131c639
VISUAL aHash	ffffe7c7c3c3c3c3
VISUAL dHash	70694d8e96969e8e
VISUAL wHash	3f3f0303c3c3c3c3
VISUAL colorHash	060000001c0
VISUAL cropResistant	70694d8e96969e8e,5931e3dae5fccf0b

Code Analysis

Risk Score 65/100

Threat Level ALTO

🎣 Credential Harvester 🎣 Banking

🔬 Threat Analysis Report

• Threat: Brand impersonation phishing
• Target: AT&T customers
• Method: Email campaign with a link to a fake promotion
• Exfil: Likely collecting personal information if the user clicks the links
• Indicators: Domain mismatch, promotional content
• Risk: HIGH - Could lead to credential theft and financial fraud

🎯 Kit Endpoints

http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784171;397319952;g
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784189;397319952;p
http://f.digital-sending.com/igit/4/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4?mimetype=text/html
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/www.att.com/broadbandinfo
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784192;397319952;j
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/www.att.com/mobilityfees
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784180;397319952;g
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784201;397319952;a
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784168;397319952;m
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784174;397319952;j
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784183;397319952;j
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784195;397319952;m
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/www.att.com/support/contact-us/
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784198;397319952;p
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784186;397319952;m
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/ad.doubleclick.net/ddm/clk/588784177;397319952;m
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/about.att.com/privacy.html
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/www.att.com/next
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/ad.doubleclick.net/ddm/clk/588784165;397319952;j
http://f.digital-sending.com/gita/4xc2v6uTqv7gnep0gaTjjiTxlfeyiTr0bTab4/2/s/www.att.com/consumerserviceagreement