EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of arabswize.com

Detection Info

http://arabswize.com
Detected Brand
Arab Swiss Bank
Country
International
Confidence
98%
HTTP Status
200
Report ID
5c49aaf1-b86…
Analyzed
2026-07-01 03:24
Final URL (after redirects)
http://arabswize.com/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T154F100B45181D63705E3D3D2A275236F63F4828AE913060923F9CB4D5FE9E21ECB6B51
CONTENT ssdeep
96:TSMtaaXEraaXEsx8cMSJSwkYhfjHhHZAkFnlNKVoc5KbZXU9kufevmiDUy+a+0ki:mM4xd4wkMjByvqc41XUnKzqaXki

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
86e17d1c3c98c7c3
VISUAL aHash
0260767f3f1f1e04
VISUAL dHash
96cececcdcfcecfc
VISUAL wHash
0260767f3f3f1e04
VISUAL colorHash
38000000180
VISUAL cropResistant
96cececcdcfcecfc

Code Analysis

Risk Score 50/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Banking

🔬 Threat Analysis Report

• Threat: Financial Phishing/Fraud
• Target: Banking customers
• Method: Brand impersonation of a non-existent or misrepresented financial institution
• Exfil: Likely leads to credential harvesting or account opening fraud
• Indicators: Extremely new domain, inconsistent naming on assets, generic site design
• Risk: High

🎯 Kit Endpoints

  • http://arabswize.com/user/login

📊 Risk Score Breakdown

Total Risk Score
95/100

Contributing Factors

Recent Domain
Registered less than 30 days ago.
Brand Impersonation
Mismatched brand assets on site.
Content Analysis
Generic banking content without verifiable contact info.

🔬 Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Arab Swiss Bank users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Banking

🏢 Brand Impersonation Analysis

Impersonated Brand
Arab Swiss Bank
Fake Service
Retail Banking

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The site mimics a banking portal to trick users into providing personal and banking credentials during an 'Account Opening' flow.

Secondary Method: Identity Theft

Collection of PII to facilitate unauthorized account access elsewhere.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
arabswize.com
Registered
2026-06-15
Registrar
Unknown
Status
Active

🤖 AI-Extracted Threat Intelligence

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.