SafeMode - Analysis: effertz.bipmain.com

Visual Capture

No screenshot available

Detection Info

http://effertz.bipmain.com/[email protected]

Detected Brand

effertz

Country

International

Confidence

95%

HTTP Status

200

Report ID

d437267b-77c…

Analyzed

2025-12-21 19:57

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1151110391001197B6087AAE2BB82A75A6694C091DEA21A400DF683BF1FF9E6CDC55AD4
CONTENT ssdeep	24:n/CkDfXr/IiG2iG41S7uZCXXD+sxiHTHVZm:nlPLsMqIDvE6

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9f94e06a3f95c06a
VISUAL aHash	ffff9f1f019fffff
VISUAL dHash	0081303c33328020
VISUAL wHash	fcfc9e1f011ee0c0
VISUAL colorHash	07000e00000
VISUAL cropResistant	0081303c33328020,9669f0d40bd2b20d,000832b2b2320c10

Code Analysis

Threat Level ALTO

🔬 Threat Analysis Report

• Threat: Email harvesting phishing kit.
• Target: Targets users who receive emails from effertz.
• Method: Presents an unsubscribe form to collect email addresses.
• Exfil: Email addresses entered are likely sent to an attacker-controlled server.
• Indicators: Domain does not match the official website, copyright notice matches the domain.
• Risk: HIGH - The site aims to collect email addresses, potentially for spam or further phishing attacks.