SafeMode - Analysis: caffeencup.com

Visual Capture

No screenshot available

Detection Info

http://caffeencup.com/.update/dhl/source/[email protected]

Detected Brand

ERRP

Country

International

Confidence

95%

HTTP Status

200

Report ID

f9c21cd9-a0e…

Analyzed

2025-12-21 07:49

Final URL (after redirects)

http://caffeencup.com/[email protected]

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F8B408DD73C6746683A3B0B8507F114BA17B6992F84CC894F189C8E42E74AAA4177F7C
CONTENT ssdeep	6144:jOoW8xVdGda98HrPcEfzivIe7mZ2bulKY/1u99xHDmHYmyBFztFnszmxWovPad4/:e8PUgACpbu7/1mbpFnsOWdMpL

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8c8c383b3333736d
VISUAL aHash	081a3a0000000000
VISUAL dHash	3a36760800000000
VISUAL wHash	ca98bdff00000000
VISUAL colorHash	07000201002
VISUAL cropResistant	3a36760800000000

Code Analysis

Risk Score 70/100

Threat Level BAJO

🔬 Threat Analysis Report

• Threat: Domain expiration notice
• Target: Owners of expired domains
• Method: Notification about domain expiration and renewal process
• Exfil: No data exfiltration is observed
• Indicators: Domain expiration notice, contact information request for renewal
• Risk: LOW - Informational page with low potential risk