EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

http://crq4804.na1.hubspotlinks.com/Btc/U+113/cRq4804/VX80ZN54KNB5N4kS8rFkQBhCW1sXT7r4xspJdM7WCRp3pl2SV1-WJV7CgCwCW2h3Kln47Mk7mN4X7whKxrN5KW1vlGC94nYh6SW85_p586Jxb-jW5kWxsm81NR3qW72fZdq7D_fzkV9s24c9fs35TN61-8RxKl-hSW5dyyNH1wXMrYVbCYjM2stV4LN1VMV2WZ4XfWW3vzhLv5t2SFRW8gFbp77bM-fbW8tT6Jq8jSD3MVTGk_B5Mm2_rW82pyKS8s6nBCN29D51Qw_DlnW3h_hkR89rTbzW2-FQXk8cLmWgW57lJDJ8B96mwV4MKVQ2T3DB8W90tzD-3Tj7gtW942BH46tmFhhW7M1QVh5-tqqZ3prB1
Detected Brand
Unknown
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
e85fb4ff-d60…
Analyzed
2025-12-31 01:17
Final URL (after redirects)
https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T177255BCEB6C9B42103B3657540BF510BB23E2996784C8554F4B9D9D52CB898EA233F3E
CONTENT ssdeep
12288:ZWc3VaJRVhuhNi5Qm1HNDj3xbYD7G2vCUK1:Zj3VajuYrxbV2vCU6

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b23399986326eccd
VISUAL aHash
0008002424ffffff
VISUAL dHash
0c1a4c4d28162800
VISUAL wHash
040c2820a0ffffff
VISUAL colorHash
070000021c0
VISUAL cropResistant
0c1a4c4d28162800

Code Analysis

Risk Score 95/100
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • https://ko-kr.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://de-de.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://about.meta.com/technologies/meta-pay
  • /r.php?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email&locale=en_US&display=page&entry_point=login
  • https://es-la.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://hi-in.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • /login/
  • /allactivity?privacy_source=activity_log_top_menu
  • https://pt-br.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • /login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email&lwv=100
  • https://zh-cn.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://ar-ar.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://it-it.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://www.facebook.com/recover/initiate/?ars=facebook_login&cancel_lara_pswd=0&next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://fr-fr.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email
  • https://www.facebook.com/login/web/

📡 API Calls Detected

  • GET
  • about:blank

📤 Form Action Targets

  • /login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fwww.facebook.com%2Fimployablebiz%3Futm_campaign%3DMonthly%2BE-Newsletters%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8nWProXO29lm6b0UczuJQkupEj6e0uTgo0ylO4zpAp7cEDegbDBxo-jGXG2jID6AM4mRINuHLesqHsYsBJEILSNG4AFg%26_hsmi%3D159378811%26utm_content%3D159378811%26utm_source%3Dhs_email&lwv=100

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

No screenshot
Facebook
http://cppb704.na1.hubspotlinks.com/Ctc/2L+113/cPPB704/VVmSk...
Jan 01, 2026
No screenshot
Unknown
http://crq4804.na1.hubspotlinks.com/Btc/U+113/cRq4804/VX80ZN...
Dec 31, 2025
No screenshot
BT
https://fdkq-zcmp.maillist-manage.eu/click/12aa53bbc2840597/...
Dec 31, 2025
No screenshot
BT
https://fdkq-zcmp.maillist-manage.eu/click/12aa53bbc2840597/...
Dec 31, 2025
No screenshot
Unknown
http://cglj404.na1.hubspotlinks.com/Ctc/OM+113/cgLJ404/MWPLj...
Dec 31, 2025

Scan History for crq4804.na1.hubspotlinks.com

Found 3 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.