EN ES PT
Back to Stats

Visual Capture

Screenshot of docs.lighting.com

Detection Info

https://docs.lighting.com/:b:/g/personal/genaro_rubio_ruiz_signify_com/EUQNxH0Mm6JNqZek0PX58poBdThQJdF0uVc_HRDVaWvIGg
Detected Brand
Microsoft
Country
International
Confidence
100%
HTTP Status
200
Report ID
99bd6e89-edf…
Analyzed
2026-01-20 00:13

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T16DC1E77155219CB340A3D6E0BAE9F76B71C5C2AACB09560192DCA39D0FFBD82ED210E5
CONTENT ssdeep
96:gc2ET3hZ4zjHsCTRMB8CT5LibDOBdH2P6vqFhmcHLZQXdntmwD0u8mQ8vrS3eeKN:OM3hZAHlRMB8CVm8aEcHLZQtnDyK5r51

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b3734c4c7673584c
VISUAL aHash
00ffffe7e7ffffff
VISUAL dHash
0808324c4c300000
VISUAL wHash
00ecfce4070f0f0f
VISUAL colorHash
070000001c0
VISUAL cropResistant
0c28324c0c100000,0000004040400080

Code Analysis

Risk Score 85/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing attack
• Target: Microsoft OneDrive users
• Method: Fake OneDrive login page stealing email addresses
• Exfil: Data sent to /personal/genaro_rubio_ruiz_signify_com/_layouts/15/guestaccess.aspx?share=EUQNxH0Mm6JNqZek0PX58poBdThQJdF0uVc_HRDVaWvIGg
• Indicators: Domain mismatch, obfuscated JavaScript, form submission, suspicious form actions
• Risk: HIGH - Immediate credential theft

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • eval
  • fromCharCode
  • unescape
  • document.write
  • base64_strings

📡 API Calls Detected

  • javascript:
  • POST

📤 Form Action Targets

  • /personal/genaro_rubio_ruiz_signify_com/_layouts/15/guestaccess.aspx?share=EUQNxH0Mm6JNqZek0PX58poBdThQJdF0uVc_HRDVaWvIGg
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.