EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of smtp.romtelecom.net

Detection Info

https://smtp.romtelecom.net/index.php?auth=err
Detected Brand
Orange
Country
Romania
Confidence
100%
HTTP Status
200
Report ID
e3dcb852-b04…
Analyzed
2026-01-02 18:53

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T16941650050095E37E04320ECA7A1915AA1F68344CB667994B6F94AED1BC5CDDDF3AA15
CONTENT ssdeep
48:rW8cwYwFwSwo170N/iu5vBUSB2WavBGQ7BOhsliuEx:l9BEvKSav7BOhorEx

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
f233313133769999
VISUAL aHash
e7e7ffe7e7ffffff
VISUAL dHash
4d4d0c4d0c000800
VISUAL wHash
20202020273f3f3f
VISUAL colorHash
07000038000
VISUAL cropResistant
4d4d0c4d0c000800,0100809090400000

Code Analysis

Risk Score 94/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 Banking 🎣 Personal Info

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • fromCharCode
  • unescape
  • document.write

📤 Form Action Targets

  • redirect.php

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Orange
https://smtp.romtelecom.net/index.php?auth=err
Mar 02, 2026

Scan History for smtp.romtelecom.net

Found 7 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.