SafeMode - Analysis: pageslearn.ghost.io

Visual Capture

No screenshot available

Detection Info

http://pageslearn.ghost.io

Detected Brand

Trust Wallet

Country

International

Confidence

100%

HTTP Status

200

Report ID

d407390d-9bf…

Analyzed

2026-01-02 15:05

Final URL (after redirects)

https://pageslearn.ghost.io/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T13072447252442A3EC22343CAAFD77394F3F24185E99D0DE5D2FCD2791283DA5D236A98
CONTENT ssdeep	384:VBElAeODd9jArDTm+7zKBR4iMEmJ090BCjvjAG:VBrhJAnTm+7eRrMBJ+0BwbAG

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	880af3f3e2c8ccda
VISUAL aHash	ff000000ffffffff
VISUAL dHash	69fff3f38f189e1e
VISUAL wHash	050000003fffffff
VISUAL colorHash	06000280030
VISUAL cropResistant	01480169499100ff,ae80897971c980ae,22001e36201e2600,fffff3fbb3f3cfff

Code Analysis

Risk Score 78/100

Threat Level BAJO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Informational content about Trust Wallet extensions
• Target: Users interested in Trust Wallet
• Method: Blog-style page with articles and a subscription form
• Exfil: User email for newsletter subscription
• Indicators: Third-party domain, content about Trust Wallet
• Risk: LOW - Primarily informational, minimal risk.

🔒 Obfuscation Detected

fromCharCode

🎯 Kit Endpoints

https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&osid=1&continue=https://docs.google.com/drawings/d/1sDd480SYCKg_ikIM13y8BPDaNKMM8q_90R-JwVbxsCw/edit&followup=https://docs.google.com/drawings/d/1sDd480SYCKg_ikIM13y8BPDaNKMM8q_90R-JwVbxsCw/edit&ltmpl=drawings&ec=GAZAGQ