Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://colliercynthia.github.io/mstest
Detected Brand
Microsoft
Country
USA
Confidence
99%
HTTP Status
200
Report ID
9ad5b583-a12…
Analyzed
2025-12-27 02:45
Final URL (after redirects)
https://colliercynthia.github.io/mstest/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T189D1657B03648BD796C0679C2F65775D37B0DAC4B172429087D31CAAAC4ADB3F078961 |
|
CONTENT
ssdeep
|
96:O5e4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDmttKhcbqoOtmCtc7aCmVQHSRi:ejoSBjlevudl9npcbqQb |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9e49f326e4999964 |
|
VISUAL
aHash
|
1910181c131f1fbf |
|
VISUAL
dHash
|
7161717165717d39 |
|
VISUAL
wHash
|
3908181c171f1fff |
Code Analysis
Risk Score
75/100
Threat Level
CRITICAL
⚠️ Phishing Confirmed
🎣 Credential Harvester
Telegram Exfiltration
🔬 Threat Analysis Report
• Threat: Credential harvesting phishing kit
• Target: Microsoft users
• Method: Fake login form stealing email and password
• Exfil: Likely to a malicious server
• Indicators: Free hosting, brand impersonation, domain mismatch
• Risk: HIGH - Potential credential theft
🔑 Telegram Bot Tokens (1)
- 7521865663:AAHh...9MBRv-JA
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for colliercynthia.github.io
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.