Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
http://siemens-heaithlneers.club
Detected Brand
Siemens Healthineers
Country
International
Confidence
100%
HTTP Status
200
Report ID
ceca0b31-562…
Analyzed
2026-01-22 07:29
Final URL (after redirects)
https://siemens-heaithlneers.club/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F0E20261A6000817053779C3A821BB9F7296E34B57828E5459AE169CFAFBCF9703D7F0 |
|
CONTENT
ssdeep
|
384:eQmWrcJOMkwgM9tLeg76ltuhC4XHAWeheeeeeeyeeePeee1:eQmW4AfW5heheeeeeeyeeePeee1 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
943feac39f30e604 |
|
VISUAL
aHash
|
ff00060e3e6058ff |
|
VISUAL
dHash
|
29b6bc3cf4cebab0 |
|
VISUAL
wHash
|
ff00060e3e6438ff |
|
VISUAL
colorHash
|
1e202008040 |
|
VISUAL
cropResistant
|
61618022152592b0,b6bc3cf4c49ab0b4,6ef80066fc6064e4,b8fec78b23268ce1,b2b4bc30e4cebab0 |
Code Analysis
Risk Score
94/100
Threat Level
BAJO
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Potential brand impersonation
• Target: Customers of Siemens Healthineers
• Method: Domain name similar to brand name could confuse users
• Exfil: No exfiltration detected
• Indicators: Domain name contains brand name but TLD is suspicious
• Risk: LOW - Unlikely to cause immediate harm, but potentially confusing
🔒 Obfuscation Detected
- fromCharCode
- unescape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- data:image/png;base64,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
📡 API Calls Detected
- PUT
- GET
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for siemens-heaithlneers.club
Found 1 other scan for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.