SafeMode - Analysis: www.i-ss.co.za

Visual Capture

Detection Info

https://www.i-ss.co.za/pf/login.php

Detected Brand

PostFinance

Country

Switzerland

Confidence

95%

HTTP Status

200

Report ID

3fe8e8c8-819…

Analyzed

2026-01-05 01:11

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T164310E7041918D3B82D382E5E3B66B1B37D8C764CB8B2B1052ECD3A94FD7E64CD1A0A5
CONTENT ssdeep	24:3C//e6YXmtTdAR847v4q9iMNFfI0E04As4i7CU:uPQEhAPvt9JNFfIb5ATU

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b101868eb339e7ce
VISUAL aHash	7f10404c400018e7
VISUAL dHash	d0a01858180c204c
VISUAL wHash	7f00040c073fcfe7
VISUAL colorHash	07000038000
VISUAL cropResistant	d0a01858180c204c

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing targeting PostFinance customers
• Target: PostFinance customers in Switzerland
• Method: Fake login form to steal card identification number
• Exfil: Unknown (form action is post.php)
• Indicators: Brand impersonation, domain mismatch (i-ss.co.za vs. postfinance.ch), form asking for sensitive information
• Risk: HIGH - Potentially immediate theft of sensitive card information