SafeMode - Analysis: 28ecne20f9u.securebankinggroup.org

Visual Capture

Screenshot of 28ecne20f9u.securebankinggroup.org

Detection Info

http://28ecne20f9u.securebankinggroup.org/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a

Detected Brand

Adobe PDF

Country

International

Confidence

100%

HTTP Status

200

Report ID

540b71f3-258…

Analyzed

2026-01-01 00:40

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T17061533190459C7A6252D3A8B3D6FF0465CEC1A6C70A6800A3F4E3CDE7E7D10DAA659A
CONTENT ssdeep	48:nICYWVBcWzcYRlUxv8Xhj1fvHgoaZ6pB+OTgl162phmzeVb8JoaTokg:n7JLREAhRfvHgoaZ6KOTg2ywSNqomokg

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b3395d66664c4c72
VISUAL aHash	00ffffffe7ffffff
VISUAL dHash	0000140c0c140000
VISUAL wHash	00c7c3c3c0e4fcfc
VISUAL colorHash	07000038000
VISUAL cropResistant	1818100c0c140000,8040402020400000

Code Analysis

Risk Score 65/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing
• Target: Users expecting to view Adobe PDF files
• Method: Fake login form stealing username and password
• Exfil: Data likely sent to /site/submit
• Indicators: Domain mismatch, login form, requests username/password
• Risk: HIGH - Immediate credential theft