EN ES PT
Back to Stats

Visual Capture

Screenshot of d26hpdecvhwn5s.cloudfront.net

Detection Info

https://d26hpdecvhwn5s.cloudfront.net/
Detected Brand
Capital One
Country
USA
Confidence
100%
HTTP Status
200
Report ID
ac60775d-b92…
Analyzed
2025-12-31 21:10

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T174141331B105293F6787E9C6A526BF05F2A18236F41B4BD4F7B4890E4FC2EE5D61B620
CONTENT ssdeep
3072:/5FvGzGVGFuzasIEC6IX75RcOGc0akkPpMY9lKkNdjc58ttv3hSZ2Xj+hd2jE6GD:/5FvGzGVGFuzasIEC6IX75RcOGc0akk0

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
cd56b34b2caa5325
VISUAL aHash
fff8f8f0f0f8ffff
VISUAL dHash
2c50e02322d12a2b
VISUAL wHash
fff830101080dbdf
VISUAL colorHash
060010100c0
VISUAL cropResistant
2c50e02322d12a2b,f1c77d5f7d477f7c,030d719f9f4e777f,010d619585614f7e,0109d52d65456561,e1071dc919599992

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • document.write
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • /privacy/online-privacy-policy#collecting-using-sharing-information-accordion-button-5
  • https://autorefi.capitalone.com/login/
  • https://autorefi.capitalone.com/login

📡 API Calls Detected

  • POST
  • GET
  • get
  • post
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.