SafeMode - Analysis: away.vk.com

Visual Capture

Detection Info

https://away.vk.com/away.php?rh=b8bd8046-f8ac-4f1c-9bb6-c246901e7460

Detected Brand

VK

Country

Russia

Confidence

100%

HTTP Status

200

Report ID

b7d2c4b0-2f8…

Analyzed

2026-01-06 00:16

Final URL (after redirects)

https://away.vk.com/challenge.html?tid=fN_kF5v1WAPlRijgLXpopgjZAcDf7A&hash429=v4QiNGiSDIMxGSYohLsRcZAXu3dbQTh0G6uNjsvJjxR7-P7uvJZBwHdpql5oKr9BsHXgQjRsaUnVyDCZ1qDbPRZEvzb-tVCzEzawRJ75GCP18CkylqFrg9_9lzwWJYqYj3mpGyjY47YyIPxr&sign=b-Ft7L_nWwzmVtQmUtpD-w&back=https%3A%2F%2Faway.vk.com%2Faway.php%3Frh%3Db8bd8046-f8ac-4f1c-9bb6-c246901e7460&origin=&lang_id=

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1D5D183E4AA3CA63D140F87ACCBAEF681235FA0EDF3170554678E96B10583E6CED46C54
CONTENT ssdeep	96:e35KFSe0BlTSc/Q04JvN/Un4jFSe0BlTSc/Q04JWatPTOYuFA9ed/WqtuKZ:ZAN3J4JvBAN3J4J/iVW9eJW4uKZ

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	cccc3333cccc2733
VISUAL aHash	0000181818180000
VISUAL dHash	100c32b2b2320c10
VISUAL wHash	3c3c3c3c3c3c3c3c
VISUAL colorHash	070000001c0
VISUAL cropResistant	100c32b2b2320c10

Code Analysis

Risk Score 95/100

Threat Level MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Captcha Phishing Targeting VK Users
• Target: VK (VKontakte) users
• Method: Fake captcha verification page to potentially redirect users to malicious sites or collect data.
• Exfil: Unknown (likely redirect or data collection)
• Indicators: Domain mismatch (away.vk.com vs. vk.com), potential JavaScript obfuscation, presence of a form submission.
• Risk: MEDIUM - Potential redirection to a malicious site or data harvesting.