EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of linkfire.prf.hn

Información de Detección

https://linkfire.prf.hn/click/camref:1101l9JLK/pubref:Cardi+B%3BCardiB.lnk.to%2FBongos%3B4c8296cec33ed0d098828bcfe8d3b10c/sportifyurl:https%3A%2F%2Fopen.spotify.com%2Ftrack%2F4YQImHflXSiIMXntcwPkx8/destination:https%3A%2F%2Ft.co%2FzHO2wC5dv6
Detected Brand
Spotify
Country
International
Confianza
100%
HTTP Status
200
Report ID
1e0f14b5-857…
Analyzed
2026-01-09 12:33
Final URL (after redirects)
https://open.spotify.com/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T12524B7A24342167A575746DCE196B219A227B70ECE4AB4C9DB3C43F20FDBCBCB11D129
CONTENT ssdeep
3072:iO147ouN9gskEoR5kma2dIZpUniLRQfqhJJl1+SgkZj6iubNUq+hIOlPi168n4pt:pMin2

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
865eaa03a96b788f
VISUAL aHash
011684003f003fff
VISUAL dHash
6524244aea685547
VISUAL wHash
019f94a03f003fff
VISUAL colorHash
39201400000
VISUAL cropResistant
8c8c8e86a38c8c88,8000002525240020,9b878393938f8f8e,f8fcfcfaab3325e5,fbf6f6feedfef6f6,6524244aea685547

Análisis de Código

Risk Score 100/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
WebSocket C2

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • js_packer
  • base64_strings

🎯 Kit Endpoints

  • //www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
  • https://google.com/recaptcha/admin/migrate

📡 API Calls Detected

  • GET
  • /api/server-time
  • https://www.google.com/ccm/geo
  • about:blank

Scan History for linkfire.prf.hn

Found 1 other scan for this domain

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.