EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of ludicando.com.br

Detection Info

http://ludicando.com.br/wp-admin/img/www.ziggo.nl/login/f61410e61d268ff741ac07431cb2dfaa80da0db4e79399b4c4e541ee784782da16c16609f487147d38b3f174514c38ba
Detected Brand
Instagram
Country
International
Confidence
100%
HTTP Status
200
Report ID
a2fc04c1-b34…
Analyzed
2026-03-17 01:13
Final URL (after redirects)
https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1A8934BB1E5018C3D1F2F8AF5E41A66BED2429C0F79B15CB0F5ADA3637283F644A17026
CONTENT ssdeep
1536:LsnFw9QXF/qh7KhaBCHwtL7ZfT0ZNqchnFoYyaqq6lySAZHEit2lXMVDgzGryqyt:LHlaqq6MSXajispDn3OtE+GnIWnIjiDQ

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b847c7383bccc0c7
VISUAL aHash
ffcfdf8d8f8fffff
VISUAL dHash
881b31391919260e
VISUAL wHash
7f898888888dc3ff
VISUAL colorHash
07601008000
VISUAL cropResistant
881b31391919260e,430b0b891963333e,260e1e1e2d0d9d39,6d67e7eb67635b7b

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
WebSocket C2

🔬 Threat Analysis Report

• Threat: Credential Phishing
• Target: Instagram users
• Method: Domain spoofing and form harvesting
• Exfil: wss://edge-chat.instagram.com/chat
• Indicators: Unrelated domain, form present, javascript form submission, obfuscation detected.
• Risk: HIGH

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=si
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=th
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=en
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=el
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=id
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=es
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=he
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=tl
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fa
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=cs
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sv
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=bg
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=mr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ja
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=zh-tw
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ne
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=hi
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ha-ng
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=af
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=tr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=kn
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=en-gb
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ur
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sk
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=om-et
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=te
  • https://about.instagram.com/blog/
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fi
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=gu
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ml
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=nl
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ar
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=zh-cn
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ro
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pa
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fr-ca
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=vi
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ms
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=nb
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=da
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ru
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ko
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=es-la
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=bn
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ta
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=zh-hk
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pl
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pt
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sw-ke
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=hr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=hu
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=uk
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=it
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=de
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=am-et
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pt-br

📡 API Calls Detected

  • about:blank
  • AsyncStorage
  • HEAD
  • GET

📊 Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Domain Mismatch
The domain ludicando.com.br has no relation to the brand Instagram.
Form for Credentials
The page includes a form specifically designed to harvest login credentials.
JavaScript obfuscation
Javascript obfuscation found on page.

🔬 Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Instagram users (International)
Attack Method
Brand impersonation + credential harvesting forms + real-time WebSocket exfiltration + obfuscated JavaScript
Exfiltration Channel
WebSocket (1 endpoints)
Risk Assessment
CRITICAL - Automated credential harvesting with WebSocket (1 endpoints)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
  • 1035 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
Instagram
Official Website
https://www.instagram.com
Fake Service
Instagram login

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker is using a fake login page that closely resembles the official Instagram login to trick users into entering their credentials. These credentials are then captured by the attacker.

Secondary Method: Domain Spoofing

The attacker registers a domain unrelated to Instagram and uses it to host the phishing page, aiming to deceive users.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
ludicando.com.br
Registered
2021-08-05
Registrar
Name.com, Inc.
Status
active

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Instagram
https://ukr-childs.varean.click/
Jun 20, 2026
 Screenshot
Instagram
https://ptatioa.cfd/shniukra/kRUWxuH
Mar 25, 2026
 Screenshot
Instagram
http://raultindogan.github.io/facebook/
Mar 20, 2026
 Screenshot
Instagram
https://anasel11.github.io/Insta
Mar 19, 2026
 Screenshot
Instagram
http://ludicando.com.br/wp-admin/img/www.ziggo.nl/login/f614...
Mar 17, 2026

Scan History for ludicando.com.br

Found 10 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.