SafeMode - Analysis: swastik-purohit-coder.github.io

Captura Visual

Screenshot of swastik-purohit-coder.github.io

Información de Detección

https://swastik-purohit-coder.github.io/streaming-clone-educational

Detected Brand

Netflix

Country

International

Confianza

95%

HTTP Status

200

Report ID

e896a805-9a6…

Analyzed

2026-03-02 21:20

Final URL (after redirects)

https://swastik-purohit-coder.github.io/streaming-clone-educational/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T10EB142A21245DE2E116782E2F372377A23A68289CA46130084FDD3681FE6D5DED3F8C4
CONTENT ssdeep	96:Tp+RLAp7kJLo2f9meRzkHo2f9me281JfbQornGBu:9+RLaklo2f9me5kHo2f9me28bfbQor5

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d2e9366d922dca86
VISUAL aHash	62203c387c780666
VISUAL dHash	d4d06161e8d0cccc
VISUAL wHash	7a603c787c7e0666
VISUAL colorHash	31401008000
VISUAL cropResistant	e4f43230e4a1a1e0,d4d06161e8d0cccc

Análisis de Código

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Usuarios de Netflix
• Método: Suplantación de identidad a través de una página de inicio de sesión falsa
• Exfil: Dirección de correo electrónico
• Indicadores: Hosting gratuito, logo de Netflix, formulario de inicio de sesión.
• Riesgo: ALTO

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Free hosting

The domain is using free hosting service which is commonly associated with phishing.

Brand impersonation

The site mimics a legitimate Netflix page.

Form asking for sensitive information

Requests the user's email.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Netflix Phishing Landing Page

Objetivo

Netflix users (International)

Método de Ataque

Brand impersonation

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Netflix

Official Website

https://www.netflix.com/

Fake Service

Netflix account access

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The attacker is attempting to collect the user's email address by impersonating the Netflix login page. Once the user enters the email, it will be sent to the attacker.