Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
http://bnpparibas.mitarbeitervorteile.de
Detected Brand
BNP Paribas
Country
International
Confidence
100%
HTTP Status
200
Report ID
c75f01a7-5ab…
Analyzed
2025-12-31 23:24
Final URL (after redirects)
https://bnpparibas.mitarbeitervorteile.de/login-input.action
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14C52C97251C1793B474381C291237B5EF2C2C12CDB921850EAF887EA9BDECF1D969267 |
|
CONTENT
ssdeep
|
384:+9tiaFsfsvCI5CPnW6f6BTxsJEJuvSf6F93L8k:+HiaFsfsKI52WHxsqGF93L8k |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
a887359bd3b3c720 |
|
VISUAL
aHash
|
2f9377ffff3d0000 |
|
VISUAL
dHash
|
dd26e6f9e1611f1f |
|
VISUAL
wHash
|
0f0377ffff3c0000 |
|
VISUAL
colorHash
|
07c00000000 |
|
VISUAL
cropResistant
|
dd36e6f9b961399f,9733397c7e7efebe,693f9f9f1f1fc934 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclSy8pAAAAAGUfvc_vYSfxLGaz2uiQf3GgDGRh&co=aHR0cHM6Ly9ibnBwYXJpYmFzLm1pdGFyYmVpdGVydm9ydGVpbGUuZGU6NDQz&hl=en&v=7gg7H51Q-naNfhmCP3_R47ho&size=invisible&sa=login&anchor-ms=20000&execute-ms=30000&cb=ost4exjxoctl
- https://bnpparibas.mitarbeitervorteile.de/login-input.action
- https://google.com/recaptcha/admin/migrate
- login.action
- https://bnpparibas.mitarbeitervorteile.de/switch-locale.action?locale=de&ref=https%3A%2F%2Fbnpparibas.mitarbeitervorteile.de%2Flogin-input.action
- https://bnpparibas.mitarbeitervorteile.de/switch-locale.action?locale=en&ref=https%3A%2F%2Fbnpparibas.mitarbeitervorteile.de%2Flogin-input.action
- login
📡 API Calls Detected
- json/web-tour-operations.action
📤 Form Action Targets
- password-recovery.action
- login.action
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for bnpparibas.mitarbeitervorteile.de
Found 2 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.