EN ES PT
Back to Stats

Visual Capture

Screenshot of pub-60feb3b0da144b72b0f8c76714a15abf.r2.dev

Detection Info

http://pub-60feb3b0da144b72b0f8c76714a15abf.r2.dev/index.html?error
Detected Brand
Microsoft
Country
International
Confidence
100%
HTTP Status
200
Report ID
62bc24ac-b0e…
Analyzed
2026-01-02 07:09
Final URL (after redirects)
https://pub-60feb3b0da144b72b0f8c76714a15abf.r2.dev/index.html?error

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T169218B78E048893747A3D5D9A5A1A35F3AA0878CD7130B055FFC039926DFEA8CD021D9
CONTENT ssdeep
24:n/nTxVx/cIgDETsCVlWJnP1NPALc756Fl+Nit8zZrAd:ntf/cIgwYCvAzPW8CMiN

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9b4be68cd933c88c
VISUAL aHash
180018081d1f1fbf
VISUAL dHash
7161717b33717d79
VISUAL wHash
391818081f1f1fff
VISUAL colorHash
07000088041
VISUAL cropResistant
7161717b33717d79

Code Analysis

Risk Score 81/100
Threat Level MEDIO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer

🔬 Threat Analysis Report

• Threat: Phishing attempt impersonating Microsoft.
• Target: Microsoft users.
• Method: Displays a fake security check page to potentially harvest credentials or distribute malware.
• Exfil: Unknown, but likely redirects to a malicious page or attempts to steal data through other means.
• Indicators: Non-official domain, free hosting service (r2.dev), JavaScript obfuscation (atob, base64_strings).
• Risk: MEDIUM - Potential for credential theft and malware infection.

🔒 Obfuscation Detected

  • atob
  • base64_strings
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.