Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://goldshorebank.com/
Detected Brand
Gold Shore Bank
Country
International
Confidence
100%
HTTP Status
200
Report ID
f8adff25-8cc…
Analyzed
2026-08-03 23:49
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T150A21B617904DE6600DB89D99633127A62F88351E943068CF9B9C7F843AFCBDCB37981 |
|
CONTENT
ssdeep
|
384:rJtlN7De8BXPvFZqbiMxze7ymsBCgWCs1HsBCgWCtXZee:rJtlNuOdZqbiMxzeGmiCgb6iCgbtXce |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d561b03d8a3bd83a |
|
VISUAL
aHash
|
f272603c381a06ff |
|
VISUAL
dHash
|
82c688e870747c30 |
|
VISUAL
wHash
|
f272603c381c0eff |
|
VISUAL
colorHash
|
0e006000040 |
|
VISUAL
cropResistant
|
b000200000000000,a2c688e860746c30 |
Code Analysis
Risk Score
65/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 Banking
🔬 Threat Analysis Report
• Threat: Phishing
• Target: Financial credentials/PII
• Method: Impersonation of a fake banking institution
• Exfil: User data submitted via web forms
• Indicators: Generic banking aesthetic, no regulatory information
• Risk: High
🎯 Kit Endpoints
- customer_login.php
- staff_login.php
📊 Risk Score Breakdown
Total Risk Score
85/100
Contributing Factors
Impersonation
Fake banking site
Lack of Credibility
No regulatory or contact information
🔬 Comprehensive Threat Analysis
Threat Type
Banking Credential Harvester
Target
Gold Shore Bank users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, Banking
🏢 Brand Impersonation Analysis
Impersonated Brand
Gold Shore Bank
Fake Service
Retail Banking
Fraudulent Claims
⚔️ Attack Methodology
Primary Method: Credential Harvesting
The site mimics a legitimate banking portal to entice users to enter PII during an 'account opening' or 'login' process.
Secondary Method: Identity Theft
Collecting PII for use in wider financial fraud or identity theft operations.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
goldshorebank.com
Registered
2025-04-18
Registrar
Unknown
Status
Active
🤖 AI-Extracted Threat Intelligence
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.