EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of gz-plsl.web.app

Información de Detección

https://gz-plsl.web.app/
Detected Brand
Газпром
Country
International
Confianza
95%
HTTP Status
200
Report ID
a00483c1-02d…
Analyzed
2026-03-16 16:21

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1BED20FA040DD61AE0245A28AED46BB0DB6E201FEFFB7570706E4396F79D7E10DA3510E
CONTENT ssdeep
384:419K40C4m/+z2Cg9YG+FUo8C6lG3ebwabOc8Dwu:Ok4Am+geG++U6lG3rWOjDwu

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b20f8f8f370b260d
VISUAL aHash
3fffc7c7c7c7ffc7
VISUAL dHash
631b1f1f0d0d1c8d
VISUAL wHash
1387c7c18587c7c7
VISUAL colorHash
06003000180
VISUAL cropResistant
631b1f1f0d0d1c8d,0010b232b0692800,fff7e3e3b3a371e3

Análisis de Código

Risk Score 53/100
Nivel de Amenaza BAJO
🎣 Credential Harvester

🔬 Threat Analysis Report

• Amenaza: Desconocida • Objetivo: Audiencia general interesada en noticias • Método: Publicación de contenido en hosting gratuito • Exfil: Potencialmente a través de enlaces o anuncios • Indicadores: Hosting gratuito y contenido. • Riesgo: Bajo

🔒 Obfuscation Detected

  • fromCharCode

📊 Desglose de Puntuación de Riesgo

Total Risk Score
30/100

Contributing Factors

Free Hosting
Free hosting is a common indicator of phishing.
Brand Logo on Suspicious Hosting
Presence of a Gazprom logo on a free hosting site.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Credential Harvesting Kit
Objetivo
General public
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester
  • 2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Gazprom
Official Website
https://www.gazprom.com

⚔️ Metodología de Ataque

Primary Method: Unknown

The site is hosted on a free hosting platform (gz-plsl.web.app). The content is in Russian and presents itself as a news page, potentially used to drive traffic to malicious links or display malicious ads.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
gz-plsl.web.app
Registered
None
Registrar
None
Estado
Active

🤖 AI-Extracted Threat Intelligence

Scan History for gz-plsl.web.app

Found 2 other scans for this domain

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.