Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://21734265559.fx1.uyohse.icu/
Detected Brand
Amazon
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
899d7dc4-1c1…
Analyzed
2026-07-06 22:15
Final URL (after redirects)
https://21734265559.fx1.uyohse.icu/h5/#/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T177C25F3C7492B86F17E38BC1E4907E1471D6AF3AC19C0E2DA3A41B941FC6CF899653A5 |
|
CONTENT
ssdeep
|
768:g8b8P8X84ekkkAFtkzkNkF7CtTzhBeC3D:g8b8P8X8ZkkkAFtkzkNkFWTzhBeC3D |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e431643164cf9bce |
|
VISUAL
aHash
|
c3c3fffffffff3e3 |
|
VISUAL
dHash
|
9696603220602686 |
|
VISUAL
wHash
|
0000003cfcfc90c3 |
|
VISUAL
colorHash
|
070030000c0 |
|
VISUAL
cropResistant
|
9696603220602686,00c013ccd4f0231c |
Code Analysis
Risk Score
97/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- atob
- fromCharCode
- unescape
- document.write
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- data:image/png;base64,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
📡 API Calls Detected
- GET
- POST
📊 Risk Score Breakdown
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
Code Obfuscation
JavaScript code obfuscated using 17 technique(s) to evade detection
🔬 Comprehensive Threat Analysis
Threat Type
Banking Credential Harvester
Target
Amazon users
Attack Method
obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
- 17 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
Amazon
Official Website
https://www.amazon.com
Fake Service
Banking/payment service
⚔️ Attack Methodology
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 17 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
21734265559.fx1.uyohse.icu
Registered
2026-02-16 10:51:24+00:00
Registrar
Chengdu west dimension digital technology Co., LTD
Status
Active (140 days old)
Hosting Information
Provider
Chengdu west dimension digital technology Co., LTD
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for 21734265559.fx1.uyohse.icu
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.