EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of ai22.hgva.net

Detection Info

http://ai22.hgva.net
Detected Brand
Discord
Country
International
Confidence
100%
HTTP Status
200
Report ID
7a860732-d3eā€¦
Analyzed
2025-12-31 22:38
Final URL (after redirects)
https://ai22.hgva.net/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1A6A3953BE8444017252349F1F7A03F0D5ACAD18FCE878C86ABB887467BD6CE2D85596D
CONTENT ssdeep
1536:XT4PVyfBMg7PjncPjncPjncPjnS4MF/ahRyrM9sP3/HlxEltf:j4PVyf+gzahAgF

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
83737e1c3cce6388
VISUAL aHash
01006b731f1f3931
VISUAL dHash
6ddacbc7f6ffe3e3
VISUAL wHash
01006b7b1f1f3f71
VISUAL colorHash
30000000180
VISUAL cropResistant
a280c0260d4280a2,6ddacbc7f6ffe3e3

Code Analysis

Risk Score 95/100
Threat Level ALTO
āš ļø Phishing Confirmed
šŸŽ£ Credential Harvester šŸŽ£ OTP Stealer šŸŽ£ Card Stealer šŸŽ£ Banking šŸŽ£ Personal Info

šŸ”¬ Threat Analysis Report

ā€¢ Threat: Discord phishing targeting user accounts.
ā€¢ Target: Discord users.
ā€¢ Method: Website impersonates Discord to collect user data and possibly redirect to a fake login page.
ā€¢ Exfil: The presence of obfuscated JavaScript suggests exfiltration is likely, destination unknown.
ā€¢ Indicators: Mismatched domain, use of obfuscated JavaScript, presence of forms.
ā€¢ Risk: HIGH - Potential for account compromise and data theft.

šŸ”’ Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • hex_escape
  • unicode_escape
  • base64_strings

šŸŽÆ Kit Endpoints

  • /blog
  • https://discord.com/login
  • https://discord.com/blog
  • /login

šŸ“” API Calls Detected

  • GET
  • https://www.google.com/ccm/geo
  • POST
  • https://hubspotonwebflow.com/assets/js/blockedDomains.json

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Unknown
https://cdn.gosafemode.com/screenshots/8b53756b0960.png
Mar 14, 2026
 Screenshot
Discord
http://vercel-proxy-mjfdzy-j7x9tv58t-lqp518.vercel.app
Jan 06, 2026
 Screenshot
Discord
http://mj-api.kun-ai.com
Jan 01, 2026
 Screenshot
Discord
http://chatgpt0005.eu.org
Jan 01, 2026
 Screenshot
Discord
https://proxy-discord.jeemoo.com
Dec 30, 2025

Scan History for ai22.hgva.net

Found 1 other scan for this domain

šŸ˜°
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.