Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
http://ccnbb.d3jcya6krt3f1x.amplifyapp.com
Detected Brand
Coinbase
Country
International
Confidence
100%
HTTP Status
200
Report ID
51d2dd4a-7bf…
Analyzed
2026-01-02 17:16
Final URL (after redirects)
https://ccnbb.d3jcya6krt3f1x.amplifyapp.com/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13C21FE7520037A6B83632AE4B3548654E1A3D30DCA275C05F7FB93DB1BE1D419D42569 |
|
CONTENT
ssdeep
|
24:nxmvC7B7IsRE0wkCCfWaVfb4uGECiHQiECsF2:nxm0EkN55GECiHQiECk2 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cccc26b399333399 |
|
VISUAL
aHash
|
0018181818000000 |
|
VISUAL
dHash
|
08301432b20c2000 |
|
VISUAL
wHash
|
00181c1c3c3c0c0c |
|
VISUAL
colorHash
|
38001008040 |
|
VISUAL
cropResistant
|
a292a09696a6a2a2,08301432b20c2000 |
Code Analysis
Risk Score
89/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🔬 Threat Analysis Report
• Threat: Cryptocurrency wallet phishing
• Target: Coinbase Wallet users
• Method: Fake login page stealing credentials
• Exfil: Likely credentials sent to a malicious server
• Indicators: Free hosting, domain mismatch, brand impersonation
• Risk: HIGH - Immediate credential theft
🔒 Obfuscation Detected
- fromCharCode
- unescape
- unicode_escape
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for ccnbb.d3jcya6krt3f1x.amplifyapp.com
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.