Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://nicsell.com/en/domain/bifrost.pl
Detected Brand
Nicsell
Country
International
Confidence
100%
HTTP Status
200
Report ID
826d3f14-49b…
Analyzed
2026-01-02 05:05
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T152F23472E451B92701B3D7D0D971375AF3B2A38CC9A7023677F443792AC9DA3E9120A5 |
|
CONTENT
ssdeep
|
384:us/WlKY7fUI7lQnJ8h8pbVo/9+5sVtkcY:J+sYzUI7o95sVacY |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f87887871bd8c466 |
|
VISUAL
aHash
|
ff80808000ffffff |
|
VISUAL
dHash
|
232737930f333617 |
|
VISUAL
wHash
|
ff00000000ffffff |
|
VISUAL
colorHash
|
0e00000a400 |
|
VISUAL
cropResistant
|
232737930f333617,2186a4a44db2320c,3327253333290f27 |
Code Analysis
Risk Score
94/100
Threat Level
BAJO
🎣 Credential Harvester
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Informational page about a domain
• Target: Visitors interested in domain information
• Method: Providing details about a registered domain
• Exfil: No data exfiltration detected
• Indicators: Official website domain, no suspicious elements
• Risk: LOW - Informational content, no credential theft risk
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- fromCharCode
- hex_escape
- unicode_escape
🎯 Kit Endpoints
- /en/login
📤 Form Action Targets
- /en/domainlist
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for nicsell.com
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.