SafeMode - Analysis: tx.me

Visual Capture

Detection Info

http://tx.me/backup_tapatap

Detected Brand

Country

International

Confidence

95%

HTTP Status

200

Report ID

331aa316-02e…

Analyzed

2026-01-06 07:24

Final URL (after redirects)

https://tx.me/backup_tapatap

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T16FE1E6E38360845D16A7C96AEF17F458E102D0C7FA352D80DADADA9F94C3DE0F923A15
CONTENT ssdeep	192:jF7HYhC1eDn0GZBqZ5SqugxuOoRnigni6U3qV0OKPGWtsY:jF7HYhC1eDn0oBshVVoPOqVbeftsY

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9c9cccc0f3e3f1c0
VISUAL aHash	7f1f1f000060f0f8
VISUAL dHash	f2b2badefec0c0c0
VISUAL wHash	ff1f1f020060f8fc
VISUAL colorHash	061c8000000
VISUAL cropResistant	f2b2badefec0c0c0

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing attempt targeting Telegram users
• Target: Telegram users worldwide
• Method: Encourages users to contact a fake Telegram bot
• Exfil: Data sent to a Telegram bot (@backup_tapatap)
• Indicators: Domain mismatch, non-official Telegram domain
• Risk: HIGH - Potential for credential theft or malware distribution