SafeMode - Analysis: web-netflix.cn

EN ES PT

Back to Stats

Captura Visual

Informações de Detecção

http://web-netflix.cn

Detected Brand

Netflix

Country

Unknown

Confiança

95%

HTTP Status

200

Report ID

7fd80374-1a3…

Analyzed

2026-08-06 11:26

Final URL (after redirects)

https://web-netflix.cn/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F472D87ED1C0ED3B4B3351D25B64A34863639688D0A79A23D6EC531B4FE4FD2982F206
CONTENT ssdeep	384:xyyvFRxG99ZqamI+Jugo3bwYoGi+jNx52VXR3jgF4:4XX4I+JurwYoWNx52R3Em

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	f6450939f6877909
VISUAL aHash	0000f0f6f6c40000
VISUAL dHash	d68184a40c3c6c10
VISUAL wHash	000074f6f6c60fff
VISUAL colorHash	38000000007
VISUAL cropResistant	d68184a40c3c6c10

Análise de Código

Risk Score 12/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🔒 Obfuscation Detected

eval
unescape
hex_escape
unicode_escape

📊 Detalhamento da Pontuação de Risco

Total Risk Score

40/100

Contributing Factors

Code Obfuscation

JavaScript code obfuscated using 34 technique(s) to evade detection

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Netflix Phishing Landing Page

Alvo

Netflix users

Método de Ataque

obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

34 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Netflix

Official Website

https://www.netflix.com

Fake Service

Credential harvesting service

⚔️ Metodologia de Ataque

Primary Method: Malicious Landing Page

Uses Netflix branding to appear legitimate in search results, social media, or advertising networks. Designed to redirect victims to phishing pages or distribute malware while maintaining appearance of authenticity.