EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

https://playrage400.info/
Detected Brand
Unknown
Country
International
Confidence
85%
HTTP Status
200
Report ID
78f01ddd-5e5…
Analyzed
2026-08-27 12:07

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1B94283311C56B827108B92F5E371338BA291C281C7270B69A2FCF39A5FD9D51CD23D2A
CONTENT ssdeep
96:8kj8XuXqsMeKorYTvMURTtEt2tJtoXB/NUwG2WWeDDorYTvMUR6DNN5e/ZQKBckb:oOq8QVTqY7bSbQVY5FcyTV/jAqC

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
ed4c93336c69651c
VISUAL aHash
00fff3f3f3e3ffff
VISUAL dHash
c400262626461826
VISUAL wHash
00f0f0f0f3e3d3c3
VISUAL colorHash
06001000640
VISUAL cropResistant
0218262626461826,034434ccc8c83444,30a0c84c944fd696

Code Analysis

Risk Score 53/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Malware distribution
• Target: Gamers
• Method: Malicious file download
• Exfil: System compromise via binary execution
• Indicators: Obfuscated JS, template-based site
• Risk: High

🔒 Obfuscation Detected

  • unescape

📡 API Calls Detected

  • POST

📊 Risk Score Breakdown

Total Risk Score
85/100

Contributing Factors

Code Obfuscation
Detected unescape function used to hide JS logic
Suspicious Content
High-risk download of unknown binary

🔬 Comprehensive Threat Analysis

Threat Type
Credential Harvesting Kit
Target
General public
Attack Method
credential harvesting forms + obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester
  • 2 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
N/A
Fake Service
Gaming

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Malware distribution

The site acts as a landing page for social engineering, leading users to download an executable masquerading as an RPG game.

Secondary Method: Obfuscation

Uses unescape to hide the payload or redirect logic from automated scanners.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
playrage400.info
Registered
Unknown
Registrar
Unknown
Status
Unknown

🤖 AI-Extracted Threat Intelligence

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.