SafeMode - Analysis: anchal-pal.github.io

Visual Capture

Detection Info

https://anchal-pal.github.io/netflix-clone/

Detected Brand

Netflix

Country

International

Confidence

95%

HTTP Status

200

Report ID

7b0ae855-d31…

Analyzed

2026-02-07 23:12

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T11F729D70A4928D3B41CBB2F92A76871FB396E392C867271637F997AD0FC1D96CD02015
CONTENT ssdeep	384:M9jQX0+r0+r0+r0+r0+e0+r0+r0+r0+r0+e0+r0+r0+r0+r0+e0+r0+r0+r0+r0O:M98X0s0s0s0s0h0s0s0s0s0h0s0s0s0v

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	fc78800ffffa20c0
VISUAL aHash	0100e0e08000ffff
VISUAL dHash	3160900020c42900
VISUAL wHash	99fae0e00000ffff
VISUAL colorHash	38000000046
VISUAL cropResistant	3160900020c42900

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Netflix users
• Method: Impersonation through a look-alike website on free hosting
• Exfil: Unclear without more information, but likely to harvest credentials or other sensitive data.
• Indicators: Free hosting, Netflix logo.
• Risk: HIGH

📊 Risk Score Breakdown

Total Risk Score

90/100

Contributing Factors

Free Hosting

The site is hosted on a free hosting platform.

Brand Impersonation

The site attempts to impersonate the legitimate Netflix website.

Suspicious Domain

Domain name does not belong to the brand.

🔬 Comprehensive Threat Analysis

Threat Type

Netflix Phishing Landing Page

Target

Netflix users (International)

Attack Method

Brand impersonation

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

Netflix

Official Website

https://www.netflix.com/

Fake Service

Netflix streaming service.

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker likely aims to steal Netflix login credentials. They replicate the Netflix UI to lure users into entering their information, which is then sent to the attacker.