SafeMode - Analysis: jahid1604091.github.io

Captura Visual

Información de Detección

http://jahid1604091.github.io/netflix_landing-page

Detected Brand

imgbb.com

Country

International

Confianza

100%

HTTP Status

200

Report ID

814f12bf-60d…

Analyzed

2026-03-17 00:20

Final URL (after redirects)

https://jahid1604091.github.io/netflix_landing-page/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T16AB1A03230C0317F06D7A7AD7924ABAAA3F34166CB564E4125EA4B4F4FA3E44DD53187
CONTENT ssdeep	48:TGnEmRJJPShy5oNBR6gDfdwp7uBDXWi9Oj8qG8O5h4198yyuKQM0uGXi4hNztWgj:TG5oN6gDfCp7yLOa4b8wQgf

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c4cc3c393949995f
VISUAL aHash	187e7e7e7e7e0000
VISUAL dHash	b3f0e0f0f8ccc0d4
VISUAL wHash	187e7e7e7e7e0000
VISUAL colorHash	180000001c0
VISUAL cropResistant	26e64839d4c42900,b3f0e0f0f8ccc0d4

Análisis de Código

Risk Score 73/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: usuarios de imgbb.com
• Método: Suplantación de identidad a través de alojamiento gratuito.
• Exfil: Potencialmente robando credenciales u otros datos.
• Indicadores: Alojamiento gratuito, logo de imgbb.com.
• Riesgo: Alto

🔒 Obfuscation Detected

fromCharCode

📡 API Calls Detected

GET

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Free Hosting

The domain is using free hosting which is a strong indicator of phishing.

Brand Impersonation

The website is displaying the logo of a legitimate brand.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

imgbb.com users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

imgbb.com

Official Website

https://imgbb.com

Fake Service

Image hosting service (imgbb.com)

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The attacker aims to steal user credentials by mimicking the appearance of a legitimate website (imgbb.com). Users are tricked into entering their login details on the fake site.