Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://fdkq-zcmp.maillist-manage.eu/click/12aa53bbc2840597/12aa53bbc283939e
Detected Brand
BT
Country
UK
Confidence
100%
HTTP Status
200
Report ID
c6f5cbec-906…
Analyzed
2025-12-31 11:07
Final URL (after redirects)
https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18972A73B720CC83A1B334F9C9AC17629D093962FCF699C8190DAD6A579C3FA48D5449F |
|
CONTENT
ssdeep
|
384:GPq8P2X7GcBsZHTzzqH854TpURiIG8AJA9qLkQY3A+O9cKRZX6RFzmoeCUX/q4fQ:GPq8P2LGcBsZHTzzqH854TpURiIG8d93 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b23399986326eccd |
|
VISUAL
aHash
|
0008002424ffffff |
|
VISUAL
dHash
|
0c1a4c4d28162800 |
|
VISUAL
wHash
|
040c2820a0ffffff |
|
VISUAL
colorHash
|
070000021c0 |
|
VISUAL
cropResistant
|
0c1a4c4d28162800 |
Code Analysis
Risk Score
95/100
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- /r.php?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F&locale=en_US&display=page&entry_point=login
- https://de-de.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://www.facebook.com/login/web/
- https://fr-fr.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://about.meta.com/technologies/meta-pay
- https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://it-it.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- /login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F&lwv=100
- https://pt-br.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://zh-cn.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- /allactivity?privacy_source=activity_log_top_menu
- https://hi-in.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://ar-ar.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- /login/
- https://ko-kr.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://www.facebook.com/recover/initiate/?ars=facebook_login&cancel_lara_pswd=0&next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
- https://es-la.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F
📡 API Calls Detected
- GET
- about:blank
📤 Form Action Targets
- /login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2FBTUK%2F&lwv=100
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
No screenshot
Facebook
http://cppb704.na1.hubspotlinks.com/Ctc/2L+113/cPPB704/VVmSk...
Jan 01, 2026
No screenshot
Unknown
http://crq4804.na1.hubspotlinks.com/Btc/U+113/cRq4804/VX80ZN...
Dec 31, 2025
No screenshot
BT
https://fdkq-zcmp.maillist-manage.eu/click/12aa53bbc2840597/...
Dec 31, 2025
No screenshot
Unknown
http://cglj404.na1.hubspotlinks.com/Ctc/OM+113/cgLJ404/MWPLj...
Dec 31, 2025
No screenshot
Unknown
http://crq4804.na1.hubspotlinks.com/Btc/U+113/cRq4804/VX80ZN...
Dec 31, 2025
Scan History for fdkq-zcmp.maillist-manage.eu
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.