Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://9caef1c3.sibforms.com/serve/MUIEAHhMYENCcIPh6PzZeZPAEgwpQSxGYUEfrb6GXpkznvbTZRT_Vo2Nbq089yxhyTGEF7g2gnPWM17LgLYkcc914de3YyQP5eWJYWp1WlK0R4Ln9Egvz-asE_22hieMGfFwFiXdmKlkcQu5DZHWhjZDsGhokg0zNxENLv9iYJKQGLKMpMK9GtIr4HAxhdzaC_sgRqaSzmO6VXRA
Detected Brand
WU Wien
Country
Austria
Confidence
100%
HTTP Status
200
Report ID
b3817df5-ae2…
Analyzed
2026-01-09 19:15
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F3D16525E150256A32C7C794E2B166CB69858740C7C39FA5D2F8937A4DCBCB4CD91BC8 |
|
CONTENT
ssdeep
|
192:NYLS7CUxcadIOun9vJjg75g7ng7qMKZsXq2k:GqC2caMNmK0+MG2k |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
dfca2666e088387d |
|
VISUAL
aHash
|
f9b8b8fcf8800604 |
|
VISUAL
dHash
|
2b6b30b0200ccc4c |
|
VISUAL
wHash
|
f9f8b8fcf8802606 |
|
VISUAL
colorHash
|
03080600000 |
|
VISUAL
cropResistant
|
18c7684bccede6e4,9b3b3ab8dafa9313,70f2faf8f08e18d8,0060dbcec646d6c6,051186200c020202,e1cf49cbcbcd4bf6,2b6b30b0200ccc4c,5455d5a4a6b256a6,8109792d6c6c657f,030c3bfaf6f6bcf8 |
Code Analysis
Risk Score
86/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- hex_escape
- unicode_escape
📡 API Calls Detected
- POST
- https://static.brevo.com/js/countries.json
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for 9caef1c3.sibforms.com
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.