EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of 24e269f7-8df9-8d3f-0b8b-docviewer.rajesh-das1010.workers.dev

Detection Info

https://24e269f7-8df9-8d3f-0b8b-docviewer.rajesh-das1010.workers.dev/58e5kbx/c4yn6hh
Detected Brand
Microsoft
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
9c744a8d-32eā€¦
Analyzed
2026-07-06 10:10

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T136327030A194ED3B90C382E59235AB5F72A6D246CB47030597FD93AC8EC6DE7EC26149
CONTENT ssdeep
192:OJybqK8ebmgChjN6aD2I5wLURsauYIueHe7:QybqK8ymgmjAaD2I5wLURsXue+7

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
d9732626278d8967
VISUAL aHash
0018181818181818
VISUAL dHash
7171b0b170707169
VISUAL wHash
3c3c3c3c3c3c3c3c
VISUAL colorHash
3a000008180
VISUAL cropResistant
b0fe82aab03b2b92,7171b0b170707169

Code Analysis

Risk Score 74/100
Threat Level ALTO
āš ļø Phishing Confirmed
šŸŽ£ Card Stealer šŸŽ£ Banking

šŸ”’ Obfuscation Detected

  • atob
  • fromCharCode
  • base64_strings

šŸ“Š Risk Score Breakdown

Total Risk Score
100/100

Contributing Factors

Active Phishing Kit
Detected kit types: Card Stealer, Banking
Code Obfuscation
JavaScript code obfuscated using 3 technique(s) to evade detection

šŸ”¬ Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Microsoft users
Attack Method
obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

āš ļø Indicators of Compromise

  • Kit types: Card Stealer, Banking
  • 3 obfuscation techniques

šŸ¢ Brand Impersonation Analysis

Impersonated Brand
Microsoft
Official Website
https://www.microsoft.com
Fake Service
Banking/payment service

āš”ļø Attack Methodology

Primary Method: Payment Card Theft

Victim enters credit/debit card details including CVV and expiration. Card data is captured and can be used for fraudulent transactions or sold on dark web markets.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 3 techniques to evade detection by security scanners and make reverse engineering more difficult.

šŸŒ Infrastructure Indicators of Compromise

Domain Information

Domain
24e269f7-8df9-8d3f-0b8b-docviewer.rajesh-das1010.workers.dev
Registered
Unknown
Registrar
Unknown
Status
Age unknown

Hosting Information

Provider
Unknown
ASN

šŸ¤– AI-Extracted Threat Intelligence

šŸ˜°
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.