SafeMode - Analysis: shubhamtiwari54.github.io

EN ES PT

Back to Stats

Visual Capture

Detection Info

http://shubhamtiwari54.github.io/youtube_simple

Detected Brand

Netflix

Country

International

Confidence

95%

HTTP Status

200

Report ID

c1862d72-6c4…

Analyzed

2026-03-02 14:55

Final URL (after redirects)

https://shubhamtiwari54.github.io/youtube_simple/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1AA91FEA5218ABA37026392C2BB66CB5273E18108DB67172104FDD3BE67E5C1AFC1750D
CONTENT ssdeep	96:TGvtWlsiqOpNKma9VTUWc0wmFvkwAGM9Y:2tWlsipKN9VwW60cpG0Y

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	db4e26f0cc452537
VISUAL aHash	b0ac2e78d8e8a627
VISUAL dHash	64694af292194ccc
VISUAL wHash	b0ac8eb8d8e8ae27
VISUAL colorHash	39600008000
VISUAL cropResistant	64694af292194ccc

Code Analysis

Risk Score 50/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Netflix users
• Method: Impersonation through a fake login page
• Exfil: Email address
• Indicators: Free hosting, brand logo, input form
• Risk: High

📊 Risk Score Breakdown

Total Risk Score

90/100

Contributing Factors

Free Hosting + Brand Logo

The combination of using free hosting (github.io) and displaying the Netflix logo is a very strong indicator of phishing.

🔬 Comprehensive Threat Analysis

Threat Type

Phishing Kit (Personal Info)

Target

Netflix users (International)

Attack Method

Brand impersonation

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Personal Info

🏢 Brand Impersonation Analysis

Impersonated Brand

Netflix

Official Website

https://www.netflix.com/

Fake Service

Netflix streaming service

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker aims to collect user email addresses through a fake login or signup form. Once the user enters their email, this information is collected and may be used for other attacks.