Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://flow.page/ijhu7gyhj
Detected Brand
AT&T
Country
USA
Confidence
100%
HTTP Status
200
Report ID
fc3b3692-9e2…
Analyzed
2025-12-31 13:27
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A45295F6A2C1AD2F932731D8F1D2F3DEF043620ADAC84694B5BD07F552DACB64021969 |
|
CONTENT
ssdeep
|
384:w1FcT+TXn1pd/cB3BGrdyCdNmfYXWKeW58GoCgM8YCCgtLC3c:w1uTwXn1ncNIcINmfS8G78YgLCc |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ea59da34ca35ca34 |
|
VISUAL
aHash
|
00001000000000ff |
|
VISUAL
dHash
|
e9e3f3f7e7e7cec9 |
|
VISUAL
wHash
|
78793931330303ff |
|
VISUAL
colorHash
|
07038000000 |
|
VISUAL
cropResistant
|
cd00c9c1094980d1,f9ebf3f3e7e7efcf |
Code Analysis
Risk Score
95/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Brand impersonation phishing
• Target: AT&T customers
• Method: The page is impersonating AT&T with the logo but the domain is not an official AT&T domain.
• Exfil: Unknown. A click may redirect to a phishing or malware site.
• Indicators: Unofficial domain, AT&T logo
• Risk: HIGH - Brand impersonation can lead to credential or financial theft.
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- https://flow.page/privacy-policy#notice-at-collection
📡 API Calls Detected
- POST
- /api/social-validation/youtube?handle=
- /api/social-validation/facebook?handle=
- GET
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for flow.page
Found 10 other scans for this domain
-
https://app-streamflow.pages.dev/
http://app-streamflow.pages.dev
https://||flow.page/att-paymentinfoupdate-portal^$...
https://www.flow.page/att-paymentinfoupdate-portal
https://||flow.page/yahoo898^$all/
https://www.flow.page/yahoo898
https://dflow.pages.dev/
http://app-streamflow.pages.dev
https://app-streamflow.pages.dev/
https://flow.page/tlcmgmt.com
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.