SafeMode - Analysis: viveksingh2207.github.io

Visual Capture

Detection Info

http://viveksingh2207.github.io/Netflix-Landing-Page

Detected Brand

Netflix

Country

International

Confidence

95%

HTTP Status

200

Report ID

d07bbad4-abc…

Analyzed

2026-02-19 23:36

Final URL (after redirects)

https://viveksingh2207.github.io/Netflix-Landing-Page/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1B5C11B3B3101693B018342F2EB699B4BFB9381599F9B0B6520F8C34D6FE6D49CC52688
CONTENT ssdeep	96:n6BO9d+Ff2M1rxH5X1nFBFEPht3wj2C+Ff2zzKjam:6BO9dgR1xH5FFBG8j2CgUG

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	84ac63723cad3337
VISUAL aHash	00767f5b96441020
VISUAL dHash	0fa4b6b2a48c68cc
VISUAL wHash	007e7fdf0674146c
VISUAL colorHash	39401000000
VISUAL cropResistant	0000c03232900000,0fa4b6b2a48c68cc

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Netflix users
• Method: Impersonation using a look-alike page on free hosting
• Exfil: Email address
• Indicators: Netflix logo, email input, GitHub Pages hosting
• Risk: High

📊 Risk Score Breakdown

Total Risk Score

90/100

Contributing Factors

Free Hosting

Uses free hosting provider Github Pages, which is often abused for phishing campaigns.

Brand Impersonation

The page mimics the appearance and branding of Netflix.

Requests Credentials

The page prompts the user to enter their email address.

🔬 Comprehensive Threat Analysis

Threat Type

Netflix Phishing Landing Page

Target

Netflix users (International)

Attack Method

Brand impersonation

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

Netflix

Official Website

https://www.netflix.com/

Fake Service

Netflix registration/login

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The attacker attempts to steal user credentials (in this case, email) by creating a fake login page that mimics the appearance of the target brand (Netflix). Users are tricked into entering their information, which is then sent to the attacker.