SafeMode - Analysis: ti-usr1-cp.cuc-carrera-ti.ac.cr

Visual Capture

Screenshot of ti-usr1-cp.cuc-carrera-ti.ac.cr

Detection Info

http://ti-usr1-cp.cuc-carrera-ti.ac.cr/oc/[email protected]

Detected Brand

Outlook

Country

International

Confidence

95%

HTTP Status

200

Report ID

7602a984-c35…

Analyzed

2026-01-06 05:44

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T12051FF60905AAC339113E2F866E4AB5B32C7C305C687294867F4C36C2EF3C5DDF66629
CONTENT ssdeep	48:nwk6iUJhhzazzld9ITOiyXhxnYa26YXAPy9uilLM7ay6BLPHwut16:nRA8zx8+hxnZbBy9ui9MeBFPwu6

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	83f67e09890999fc
VISUAL aHash	3f3f3f3f3f3f3f3f
VISUAL dHash	d0ccccd8d0d0d0d0
VISUAL wHash	3f27373f3f000000
VISUAL colorHash	060000001c0
VISUAL cropResistant	a09c989080808080,f184acb6b6ac84f3,0e71710e20000000

Code Analysis

Risk Score 58/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing kit
• Target: Outlook users worldwide
• Method: Fake login form stealing email and password
• Exfil: Data sent via JavaScript form submission
• Indicators: Mismatched domain, obfuscated JavaScript, non-official branding
• Risk: HIGH - Immediate credential theft