EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

https://esdgte2.pages.dev/-/zh/gp/most-wished-for/books/12687/ref=zg_mw_nav_books_3_12474
Detected Brand
Amazon
Country
International
Confidence
100%
HTTP Status
200
Report ID
9dc39413-89cā€¦
Analyzed
2025-12-31 02:26

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T100D55A98B1A17032466B30B9943F030AB1779B6AF50486B8B4ADD6D81FB8D8D5537F3C
CONTENT ssdeep
49152:0qcDoKdS3daUMKbakzMovnVeaw9IIoD4HyVvcSjgifcng5Y2lRAA/Mnogu:0neT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b9174747936a86c6
VISUAL aHash
0000ffc7ffffc1ff
VISUAL dHash
c832b31f1b371713
VISUAL wHash
0000ffc5c7c5c1ff
VISUAL colorHash
07001000180
VISUAL cropResistant
8080c2d2d2828080,0a8a2a0a00bca00a,b21f1b1b3717173a,c8c8e0d8ca0aa22a,2a197169610c3230,1b5b1f9f9fbfbf37,8c00845342c3d212,d09880f0f0f0eee8,60f0d46070507070

Code Analysis

Risk Score 100/100
Threat Level BAJO
šŸŽ£ Credential Harvester šŸŽ£ OTP Stealer šŸŽ£ Card Stealer šŸŽ£ Banking šŸŽ£ Personal Info

šŸ”¬ Threat Analysis Report

ā€¢ Threat: No threat detected
ā€¢ Target: Amazon users looking for books
ā€¢ Method: Listing books on Amazon
ā€¢ Exfil: No data exfiltration
ā€¢ Indicators: Legitimate Amazon website
ā€¢ Risk: LOW - No risk detected

šŸ” Credential Harvesting Forms

šŸ”’ Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • base64_strings

šŸŽÆ Kit Endpoints

  • https://sustainability.aboutamazon.com/?utm_source=gateway&utm_medium=footer&ref_=susty_footer
  • https://www.aboutamazon.com/?utm_source=gateway&utm_medium=footer&token=about
  • https://logistics.amazon.com/marketing?utm_source=amzn&utm_medium=footer&utm_campaign=home
  • /kindle-dbs/cu/signup?ref=books_dsk_sn_comixology-un-e5e7f
  • https://email.aboutamazon.com/l/637851/2020-10-29/pd87g?utm_source=gateway&utm_medium=amazonfooters&utm_campaign=newslettersubscribers&utm_content=amazonnewssignup

šŸ“” API Calls Detected

  • GET
  • POST

šŸ“¤ Form Action Targets

  • /s/ref=nb_sb_noss
  • get

Scan History for esdgte2.pages.dev

Found 10 other scans for this domain

šŸ˜°
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.