Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://s7.dih.pl/roundcube
Detected Brand
Unknown
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
99e76d6a-de0…
Analyzed
2026-01-02 22:48
Final URL (after redirects)
https://s7.dih.pl/roundcube/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1FA51A41090245C3715E34DF9D6CAF79298EE816CCF207C2938FC85AE07EAE1881B57A6 |
|
CONTENT
ssdeep
|
48:mGkDJ5meKsgDfwJD/TlNjgvqlkZl8BBm5gZE1aIa44y:wU+7nEvqg2C |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b333cccccc723199 |
|
VISUAL
aHash
|
ffe7e7e7ffffffff |
|
VISUAL
dHash
|
00080c0c00080000 |
|
VISUAL
wHash
|
ffe7e7e700000000 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
00080c0c00080000 |
Code Analysis
Risk Score
95/100
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- document.write
- base64_strings
🎯 Kit Endpoints
- /roundcube/?_task=login
- sendmdn
📤 Form Action Targets
- /roundcube/?_task=login
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Unknown
https://cdn.gosafemode.com/screenshots/ce87ecc2f243.png
Jul 01, 2026
Unknown
https://cdn.gosafemode.com/screenshots/4a47e464e9ed.png
May 18, 2026
Unknown
https://cdn.gosafemode.com/screenshots/0315ee3a8e53.png
May 17, 2026
Unknown
https://cdn.gosafemode.com/screenshots/e6b85ecffcae.png
Mar 14, 2026
No screenshot
Unknown
http://cloudhost-75870.us-west-1.nxcli.net/roundcube?_task=m...
Jan 01, 2026
Scan History for s7.dih.pl
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.