Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://cloud.engeconindustrial.com.br/wp-admin/ca/[email protected]
Detected Brand
Ionos
Country
International
Confidence
95%
HTTP Status
200
Report ID
c6aa828c-e4e…
Analyzed
2026-01-15 06:24
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18D31CD4015819C789608C1F4CAE2A60F0B52C362CF071BD086A48FAFA9EADD5DD925FD |
|
CONTENT
ssdeep
|
24:kpIv6N8OupI1xSvCqM54+pY4GRc3u2xiIBb4IHicyN63yG0/JjO8iczpHvOyF:AIv4upSxS69O+8RoOICL5jqmB |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f373595c4c664c4c |
|
VISUAL
aHash
|
00ffe7e7ffffff00 |
|
VISUAL
dHash
|
08080c4d00000030 |
|
VISUAL
wHash
|
00a727270000ff00 |
|
VISUAL
colorHash
|
07006000040 |
|
VISUAL
cropResistant
|
4c0c4c0c00080000,0000000000000000,100830b232000000 |
Code Analysis
Risk Score
59/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🔬 Threat Analysis Report
• Threat: Credential harvesting phishing kit
• Target: Ionos users
• Method: Fake login form stealing email and password
• Exfil: Data sent to unrelated domain (cloud.engeconindustrial.com.br)
• Indicators: Domain mismatch, obfuscated JavaScript, suspicious form action
• Risk: HIGH - Immediate credential theft
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- base64_strings
📤 Form Action Targets
- 28th.php
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Unknown
http://testificaria.us/update/[email protected]
Aug 10, 2026
abuse.ionos.com
https://triboz.com.br/Mac/[email protected]...
Jan 07, 2026
No screenshot
example.com
https://clasifique.com.tr/pach/index.php?emp=someone@example...
Jan 07, 2026
No screenshot
IONOS
https://cloud.engeconindustrial.com.br/wp-admin/ca/index.php...
Jan 01, 2026
No screenshot
Example.com
https://clasifique.com.tr/pach/index.php?emp=someone@example...
Dec 15, 2025
Scan History for cloud.engeconindustrial.com.br
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.