Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://shubhangivarkhade.github.io/timer2/
Detected Brand
Netflix
Country
International
Confidence
95%
HTTP Status
200
Report ID
5a989541-3e9…
Analyzed
2026-03-17 23:46
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12FF1B476A2485D234293A3D8B13513BB3A5192C9CA078640A5F45F9FE6FBCF0DC2C784 |
|
CONTENT
ssdeep
|
96:TfknmY8/N2fyxEccPjjWO7S+MDiXS+MDiN38r3GW6cGDvbM3KIM+S+MDio+S+MDg:D3pp+MDiC+MDib+MDiy+MDi3Ww |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c696072e78c13f63 |
|
VISUAL
aHash
|
1c3e7cfcc0307000 |
|
VISUAL
dHash
|
68e8e0902064c4d4 |
|
VISUAL
wHash
|
3c7e7efcf0307040 |
|
VISUAL
colorHash
|
30e00008000 |
|
VISUAL
cropResistant
|
68e8e0902064c4d4 |
Code Analysis
Threat Level
ALTO
⚠️ Phishing Confirmed
🔬 Threat Analysis Report
• Threat: Impersonation
• Target: Netflix users
• Method: Mimicking the Netflix website.
• Exfil: Unclear without user interaction
• Indicators: Free hosting, brand logo, content matching Netflix
• Risk: High
📊 Risk Score Breakdown
Total Risk Score
90/100
Contributing Factors
Free Hosting
The use of a free hosting platform like GitHub Pages is a significant indicator of phishing.
Brand Impersonation
The page attempts to replicate Netflix's UI.
Content Similarity
Content matches the Netflix platform.
🔬 Comprehensive Threat Analysis
Threat Type
Netflix Phishing Landing Page
Target
Netflix users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
🏢 Brand Impersonation Analysis
Impersonated Brand
Netflix
Official Website
https://www.netflix.com/
Fake Service
Netflix
⚔️ Attack Methodology
Primary Method: Brand Impersonation
The attacker creates a look-alike website of Netflix to trick users.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
shubhangivarkhade.github.io
Registered
None
Registrar
None
Status
None
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Netflix
https://omkar-dhamdhere.github.io/Netflix-clone/
Jun 06, 2026
Netflix
https://saadshaikh27.github.io/Second-Repo
Jun 06, 2026
Netflix
https://omkarkavitake.github.io/stopwatch/
Apr 08, 2026
Netflix
http://omkarkavitake.github.io/stopwatch
Feb 17, 2026
Netflix
http://omkarkavitake.github.io/stopwatch
Feb 12, 2026
Scan History for shubhangivarkhade.github.io
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.