Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
http://am40.1.com.ar/
Detected Brand
Unknown
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
85f5ce12-2c9…
Analyzed
2026-01-10 13:07
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14B61A61140385E3712F24DE9D6C9EB9254EEC26CCF105C2D24FCC9DE0BEAE18C27A6A5 |
|
CONTENT
ssdeep
|
48:mFJ5meKsgDfwJZAxi/TGjgv92kZl8BBm5gPE1aOEJMerLNbrI5g4i:8UC7GEv9buLMerLN7 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b333cccc66339989 |
|
VISUAL
aHash
|
ffe7e7e7ffffffff |
|
VISUAL
dHash
|
00080c0c08000000 |
|
VISUAL
wHash
|
1f0727270f0f0f0f |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
00080c0c08000000 |
Code Analysis
Risk Score
95/100
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- document.write
- base64_strings
🎯 Kit Endpoints
- plugins/persistent_login/persistent_login.js?s=1743792919
- /?_task=login
- plugins/persistent_login/persistent_login.css?s=1743792919
- sendmdn
📤 Form Action Targets
- /?_task=login
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Unknown
https://cdn.gosafemode.com/screenshots/c0c2905cf99a.png
Apr 07, 2026
Unknown
https://cdn.gosafemode.com/screenshots/d43ba6c7bfb9.png
Apr 07, 2026
No screenshot
Unknown
https://maketheupdate.wpenginepowered.com/fy/
Jan 17, 2026
No screenshot
Unknown
https://maketheupdate.wpenginepowered.com/fy/
Jan 16, 2026
No screenshot
Unknown
https://livetraffic.wpenginepowered.com/att/
Jan 15, 2026
Scan History for am40.1.com.ar
Found 3 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.