EN ES PT
Back to Stats

Visual Capture

Screenshot of pub-84a8b022128b4443a6d59b25513f1cf6.r2.dev

Detection Info

https://pub-84a8b022128b4443a6d59b25513f1cf6.r2.dev/index.html?38401cfab0a150cb2d9150ec2e1228
Detected Brand
Microsoft
Country
USA
Confidence
100%
HTTP Status
200
Report ID
484a39a4-a7f…
Analyzed
2025-12-30 23:36

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T152C57DD47365703647DB9096507A0542F33A74A91808842CFA2CE8EB7BA9C4972FFFB5
CONTENT ssdeep
49152:uPIWChMkThabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4tgJSs89CqqqeK:/PaHKPsqPjTxXy

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
8bb320ccc6779999
VISUAL aHash
ffffffe718180000
VISUAL dHash
00102a2ab2b20c10
VISUAL wHash
ffffffc618180000
VISUAL colorHash
07001480000
VISUAL cropResistant
00102a2ab2b20c10

Code Analysis

Risk Score 95/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing targeting Microsoft users.
• Target: Users of Microsoft services
• Method: Imitates a legitimate Microsoft sign-in page to potentially harvest credentials or redirect to malicious sites.
• Exfil: Unknown, but likely aims to steal credentials or personal information.
• Indicators: The domain pub-84a8b022128b4443a6d59b25513f1cf6.r2.dev, which is not an official Microsoft domain, is hosting the page. The page displays a Microsoft logo and the phrase 'Taking you to your organization's sign-in page'.
• Risk: HIGH - Potential credential theft or malware installation.

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unicode_escape
  • base64_strings

📡 API Calls Detected

  • ${TW}
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.