SafeMode - Analysis: f.digital-sending.com

Visual Capture

Detection Info

http://f.digital-sending.com/igit/4/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp

Detected Brand

AT&T

Country

USA

Confidence

100%

HTTP Status

200

Report ID

fa288e7f-b1c…

Analyzed

2025-12-30 23:30

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T18CD28232C8E123AE25B2C151B8813AD79F2284CBF7764790F87FCAA9FBD45165173116
CONTENT ssdeep	384:xs4rf0U/uDbAjYcu/iMC8dWyB3CVJ7CVJXmatPWkB3qq/Pk:Jrf0xSi/i9KY

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b3cbce2c993388c3
VISUAL aHash	ffffe7c3c3c3c3ff
VISUAL dHash	78694d8e969e8e69
VISUAL wHash	ffffc3c30000003c
VISUAL colorHash	060000001c0
VISUAL cropResistant	78694d8e969e8e69,53766ebcbecbcf17

Code Analysis

Risk Score 50/100

Threat Level MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Phishing email impersonating AT&T.
• Target: AT&T customers.
• Method: The email promotes a deal for a Samsung Galaxy S24+ and tries to get users to click a link to "Learn more".
• Exfil: Unknown, likely redirects to a phishing site.
• Indicators: Domain mismatch (f.digital-sending.com vs att.com).
• Risk: MEDIUM - Clicking the link can lead to credential theft or malware infection.

🎯 Kit Endpoints

http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/588189127;396489195;m
http://f.digital-sending.com/igit/4/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp?mimetype=text/html
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/www.att.com/consumerserviceagreement
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983327;396489195;p
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983339;396489195;s
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/www.att.com/mobilityfees
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/588189130;396489195;g
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983336;396489195;p
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983348;396489195;s
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983330;396489195;j
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587909306;396489195;k
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/about.att.com/privacy.html
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/www.att.com/support/contact-us/
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983342;396489195;m
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983345;396489195;p
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/587983333;396489195;m
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/www.att.com/broadbandinfo
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/ad.doubleclick.net/ddm/clk/587983324;396489195;m
http://f.digital-sending.com/gita/dkpf1xxRz4259yal1vRex3Rmzg1saRzjwRuwp/2/s/ad.doubleclick.net/ddm/clk/588189148;396489195;p