Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://www.support-ict.com/
Detected Brand
Unknown
Country
International
Confidence
95%
HTTP Status
200
Report ID
410054c4-3e9…
Analyzed
2026-06-04 10:17
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13FF0A22082140DAE8C52A2DD56C0E759DAD08508C395374929A492B5879FD99D8953CC |
|
CONTENT
ssdeep
|
12:nwMy7FUwspbTcnVctbOWNqwOW1f/lJMCLUP4CgQ:n/CQp3SVctbNNqwNKPPt |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b389cc6633996666 |
|
VISUAL
aHash
|
ffffffff24000000 |
|
VISUAL
dHash
|
210430aa4d4c3001 |
|
VISUAL
wHash
|
ffffffef80000000 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
210430aa4d4c3001 |
Code Analysis
Risk Score
9/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🔬 Threat Analysis Report
• Threat: Phishing/Gatekeeper
• Target: Unknown
• Method: CAPTCHA bypass/landing gate
• Exfil: Unknown (protected by gate)
• Indicators: Extremely young domain, obfuscated scripts
• Risk: High
🔒 Obfuscation Detected
- unescape
- document.write
- base64_strings
📡 API Calls Detected
- POST
📊 Risk Score Breakdown
Total Risk Score
95/100
Contributing Factors
Domain Age
Domain registered < 30 days ago.
Technical Obfuscation
Use of unescape, document.write, and base64 to hide source code.
🔬 Comprehensive Threat Analysis
Threat Type
Unknown Threat
Target
General public
Attack Method
obfuscated JavaScript
Exfiltration Channel
Unknown
Risk Assessment
LOW - Automated credential harvesting with Unknown
⚠️ Indicators of Compromise
- 7 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
Unknown
Fake Service
IT Support
⚔️ Attack Methodology
Primary Method: Bot/Security Filter
Uses a fake CAPTCHA to filter bots and serve malicious content only to genuine users.
Secondary Method: Credential Harvesting
Typically follows the gate with a fraudulent login form.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
support-ict.com
Registered
2026-06-02
Registrar
Unknown
Status
Newly Registered
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
ING Bank
https://ing-help.net/
May 24, 2026
Unknown
https://cdn.gosafemode.com/screenshots/fe2d54f48896.png
May 05, 2026
Unknown
https://cdn.gosafemode.com/screenshots/142af40e7fbc.png
May 02, 2026
Unknown
https://cdn.gosafemode.com/screenshots/daf8268836ff.png
Apr 28, 2026
Unknown
https://cdn.gosafemode.com/screenshots/87833bf19a55.png
Apr 14, 2026
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.