EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of linkfire.prf.hn

Informações de Detecção

https://linkfire.prf.hn/click/camref:1101l9JLK/pubref:Cardi+B%3BCardiB.lnk.to%2FBongos%3B4c8296cec33ed0d098828bcfe8d3b10c/sportifyurl:https%3A%2F%2Fopen.spotify.com%2Ftrack%2F4YQImHflXSiIMXntcwPkx8/destination:https%3A%2F%2Ft.co%2FzHO2wC5dv6
Detected Brand
Spotify
Country
International
Confiança
100%
HTTP Status
200
Report ID
1e0f14b5-857…
Analyzed
2026-01-09 12:33
Final URL (after redirects)
https://open.spotify.com/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T12524B7A24342167A575746DCE196B219A227B70ECE4AB4C9DB3C43F20FDBCBCB11D129
CONTENT ssdeep
3072:iO147ouN9gskEoR5kma2dIZpUniLRQfqhJJl1+SgkZj6iubNUq+hIOlPi168n4pt:pMin2

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
865eaa03a96b788f
VISUAL aHash
011684003f003fff
VISUAL dHash
6524244aea685547
VISUAL wHash
019f94a03f003fff
VISUAL colorHash
39201400000
VISUAL cropResistant
8c8c8e86a38c8c88,8000002525240020,9b878393938f8f8e,f8fcfcfaab3325e5,fbf6f6feedfef6f6,6524244aea685547

Análise de Código

Risk Score 100/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
WebSocket C2

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • js_packer
  • base64_strings

🎯 Kit Endpoints

  • //www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
  • https://google.com/recaptcha/admin/migrate

📡 API Calls Detected

  • GET
  • /api/server-time
  • https://www.google.com/ccm/geo
  • about:blank

Scan History for linkfire.prf.hn

Found 1 other scan for this domain

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.