SafeMode - Analysis: vbq.99b.mytemp.website

EN ES PT

Back to Stats

Visual Capture

Detection Info

https://vbq.99b.mytemp.website/wp-content/plugins/dk/

Detected Brand

Vipps MobilePay

Country

Unknown

Confidence

100%

HTTP Status

200

Report ID

6c0b2bac-e94…

Analyzed

2026-07-22 07:11

Final URL (after redirects)

https://vbq.99b.mytemp.website/wp-content/plugins/dk/?NIIMRA=df01dfe9f829562fa69f6de3c18e846d4d3dfe6a9cafa77823fa622889ad1cc7

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T11B21673428155C29C82593E05FE1698516BF8B40CE861840D6D86F5F0FD6C94C96F758
CONTENT ssdeep	24:hNsCIyBKTRtYGH7sdimqGDplYSZqupPVMSV:/ooKnYqGDLVXV

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	db8c643199ce6699
VISUAL aHash	f0f0f8f8f8e0c0c0
VISUAL dHash	0000282810080000
VISUAL wHash	f8f0f8f8f8e0e0c0
VISUAL colorHash	07003018000
VISUAL cropResistant	0000282810080000

Code Analysis

Risk Score 50/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Banking

🔐 Credential Harvesting Forms

📤 Form Action Targets

./action/1221.php

📊 Risk Score Breakdown

Total Risk Score

75/100

Contributing Factors

Active Phishing Kit

Detected kit types: Banking

Credential Harvesting

Credential harvesting detected with 1 form(s) capturing sensitive data

🔬 Comprehensive Threat Analysis

Threat Type

Banking Credential Harvester

Target

Vipps MobilePay users

Attack Method

credential harvesting forms

Exfiltration Channel

HTTP POST to backend

Risk Assessment

MEDIUM - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Banking

🏢 Brand Impersonation Analysis

Impersonated Brand

Vipps MobilePay

Official Website

N/A

Fake Service

Banking/payment service

⚔️ Attack Methodology

Primary Method: Banking Credential Theft

Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.