EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of ludicando.com.br

Detection Info

http://ludicando.com.br/wp-admin/img/www.ziggo.nl/login/2e14aab43b3a2f1afb659f636dddea45c51caced70a45c951cad08304090cd27aeaf7216602a3f1be60adf4fb08118ed
Detected Brand
Instagram
Country
International
Confidence
100%
HTTP Status
200
Report ID
f413a5ac-e9dā€¦
Analyzed
2026-03-17 01:10
Final URL (after redirects)
https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1EB934BB1E501CC3D1F2F8AF5E41A66BED2469C0F79A15CB0F5ADA3637283F644A17026
CONTENT ssdeep
1536:LsnFw9QXF/qh7KhaBCHwtL7ZfT0ZNqchnFoYBaqq6lySAZHEit2lXMVDgzGryqy2:LHCaqq6MSXajispDn3OtE+GnIWnIjiDT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b84fc7303bccc0c7
VISUAL aHash
ffcfdf8d8f8fffff
VISUAL dHash
881b31391919260e
VISUAL wHash
7f888888888fc3ff
VISUAL colorHash
07601008000
VISUAL cropResistant
881b31391919260e,430b0b891963333e,260e1e1e2d0d9d39,6d67e7eb67635b7b

Code Analysis

Risk Score 100/100
Threat Level ALTO
āš ļø Phishing Confirmed
šŸŽ£ Credential Harvester šŸŽ£ OTP Stealer šŸŽ£ Card Stealer šŸŽ£ Banking šŸŽ£ Personal Info
WebSocket C2

šŸ”¬ Threat Analysis Report

ā€¢ Threat: Phishing
ā€¢ Target: Instagram users
ā€¢ Method: Credential harvesting
ā€¢ Exfil: wss://edge-chat.instagram.com/chat
ā€¢ Indicators: Domain mismatch, login form
ā€¢ Risk: HIGH

šŸ”’ Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

šŸŽÆ Kit Endpoints

  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=da
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sv
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=he
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=de
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=hr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=om-et
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=uk
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=tr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=hi
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=bn
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=zh-hk
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=nl
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sk
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ro
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=nb
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=cs
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ha-ng
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ta
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=vi
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ja
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=bg
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=en
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pl
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=es
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=id
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=tl
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ur
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=el
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=zh-tw
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=th
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=sw-ke
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=am-et
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pa
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=es-la
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ml
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fa
  • https://about.instagram.com/blog/
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fr-ca
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=te
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=en-gb
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=mr
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ko
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=gu
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pt-br
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ru
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=hu
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=zh-cn
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=it
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=fi
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=si
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=kn
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ar
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ms
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=af
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=pt
  • https://www.instagram.com/accounts/login/?next=https%3A%2F%2Fwww.instagram.com%2Fludicando.club&is_from_rle&hl=ne

šŸ“” API Calls Detected

  • HEAD
  • AsyncStorage
  • GET
  • about:blank

šŸ“Š Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Domain Mismatch
The domain does not belong to the official Instagram domain.
Credential Harvesting Form
The presence of a login form requesting sensitive credentials.
Obfuscated JavaScript
Javascript obfuscation found.
Age and History
Domain has been live for more than 30 days, possibly a re-use attack.

šŸ”¬ Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Instagram users (International)
Attack Method
Brand impersonation + credential harvesting forms + real-time WebSocket exfiltration + obfuscated JavaScript
Exfiltration Channel
WebSocket (1 endpoints)
Risk Assessment
CRITICAL - Automated credential harvesting with WebSocket (1 endpoints)

āš ļø Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
  • 1066 obfuscation techniques

šŸ¢ Brand Impersonation Analysis

Impersonated Brand
Instagram
Official Website
https://www.instagram.com
Fake Service
Instagram Login

āš”ļø Attack Methodology

Primary Method: Credential Harvesting

The website presents a fake login form that is designed to steal the username/email and password credentials of Instagram users. These credentials are then likely used to gain unauthorized access to Instagram accounts.

Secondary Method: JavaScript Obfuscation

The presence of obfuscated JavaScript code suggests an attempt to hide malicious functions or to evade detection by security software.

šŸŒ Infrastructure Indicators of Compromise

Domain Information

Domain
ludicando.com.br
Registered
None
Registrar
Unknown
Status
Active

šŸ¤– AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Instagram
http://ludicando.com.br/wp-admin/img/www.ziggo.nl/login/ad71...
Mar 17, 2026

Scan History for ludicando.com.br

Found 10 other scans for this domain

šŸ˜°
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.