SafeMode - Analysis: cwfctthinktalent.co.za

Visual Capture

Detection Info

https://cwfctthinktalent.co.za/wp-admin/js/widgets/excel/[email protected]

Detected Brand

Microsoft Excel

Country

International

Confidence

95%

HTTP Status

200

Report ID

e464839e-e83…

Analyzed

2026-01-01 09:35

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1D3311020D2155E179342C5DCF8E6BB1A2643830AC7021F092BB442BAABDDE99DD542E4
CONTENT ssdeep	24:kmsqwUfz5TGHNNUHNNbgtx8V4jFG9YvPl/+a2shV58u/e6FrFM63gfN9GvstJF5L:Cqw456HzCMt/j8KvdmBG526NKlHpRYGr

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	cb4b3435374b5a54
VISUAL aHash	00fff8fdefffffff
VISUAL dHash	565571695a13e980
VISUAL wHash	000038a98b9ffffe
VISUAL colorHash	07000000e00
VISUAL cropResistant	d671614b1a33c980,0000004040000000

Code Analysis

Risk Score 58/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing attack
• Target: Users of Microsoft Excel
• Method: Fake login form embedded in an Excel document to steal email and password
• Exfil: Unknown, likely sent to a server controlled by the attacker
• Indicators: Domain mismatch, asks for email and password to view document, form submission detected
• Risk: HIGH - Immediate credential theft