Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
http://www.norvathglobal.life/resgatar/
Detected Brand
Unknown
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
7cd68c40-356…
Analyzed
2026-08-10 22:15
Final URL (after redirects)
https://norvathglobal.life/resgatar
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1BF22822431144C2E72230BA6F1D1BA99D4B8F349C647DDA8E2FD01AB27C6DD188A7979 |
|
CONTENT
ssdeep
|
192:SYzjGH/HRH7//0s1FYb85h1Dg3HkTJYuTuwBIqiHNdH8HMV:rzj23pB5h1DuHkTJhCakHvHM2 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3333333cc8ccccc |
|
VISUAL
aHash
|
e7e7ffe7ffffffff |
|
VISUAL
dHash
|
4d4d324d0c0c080c |
|
VISUAL
wHash
|
e0e0e8e0e4e4e8e0 |
|
VISUAL
colorHash
|
07000008007 |
|
VISUAL
cropResistant
|
4d4d324d0c0c080c,0286c68686108281 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- data:image/png;base64,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
📡 API Calls Detected
- https://ipapi.co/json/
- get
- POST
📊 Risk Score Breakdown
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
Code Obfuscation
JavaScript code obfuscated using 107 technique(s) to evade detection
🔬 Comprehensive Threat Analysis
Threat Type
Banking Credential Harvester
Target
General public
Attack Method
obfuscated JavaScript
Exfiltration Channel
Unknown
Risk Assessment
CRITICAL - Automated credential harvesting with Unknown
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
- 107 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
Generic Phishing
Official Website
N/A
Fake Service
Banking/payment service
⚔️ Attack Methodology
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 107 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
www.norvathglobal.life
Registered
Unknown
Registrar
Unknown
Status
Age unknown
Hosting Information
Provider
Unknown
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for www.norvathglobal.life
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.