SafeMode - Analysis: adhisayakuppusamy.github.io

Visual Capture

Screenshot of adhisayakuppusamy.github.io

Detection Info

https://adhisayakuppusamy.github.io/Netfix-clone-page

Detected Brand

Netflix

Country

International

Confidence

95%

HTTP Status

200

Report ID

7f8fe1b5-eaa…

Analyzed

2026-03-17 04:08

Final URL (after redirects)

https://adhisayakuppusamy.github.io/Netfix-clone-page/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T12661233B7044305B0693A3A93F21DB5A3A87815A8F260F1520F5DB9F6FD6E09CC462DE
CONTENT ssdeep	48:TXINJhIJafC9m9GKTfSjPSw099gjw4myuKWgXw4YHzwM0XlBcuB:T5aK9m9GKTfSjPRK9gjFESSQ

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d3972972c66d3990
VISUAL aHash	a32c7e7cfec4e000
VISUAL dHash	4a48bae0ec198bc2
VISUAL wHash	a2ac7e7efec4e000
VISUAL colorHash	32600008040
VISUAL cropResistant	c5c000e060c000c8,4a48bae0ec198bc2

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Netflix users
• Method: Impersonation through a fake login page.
• Exfil: Email addresses, potentially more data after login.
• Indicators: Free hosting, Netflix logo, and email form.
• Risk: High

📊 Risk Score Breakdown

Total Risk Score

90/100

Contributing Factors

Free Hosting

The site is hosted on a free hosting service (github.io), a common indicator of phishing.

Impersonation

The website mimics the Netflix login page to deceive users.

🔬 Comprehensive Threat Analysis

Threat Type

Netflix Phishing Landing Page

Target

Netflix users (International)

Attack Method

Brand impersonation

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

Netflix

Official Website

https://www.netflix.com/

Fake Service

Netflix

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker aims to steal Netflix credentials by tricking users into entering their email address. After an email is entered, they are potentially redirected to an actual login form to steal the actual password.