SafeMode - Analysis: crsorgi.gov.in.web.index.birthcetficate.co

Captura Visual

Screenshot of crsorgi.gov.in.web.index.birthcetficate.co

Informações de Detecção

http://crsorgi.gov.in.web.index.birthcetficate.co

Detected Brand

Civil Registration System (CRS India)

Country

Unknown

Confiança

100%

HTTP Status

200

Report ID

cc8ebbb8-c4e…

Analyzed

2026-06-14 11:10

Final URL (after redirects)

http://crsorgi.gov.in.web.index.birthcetficate.co/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T199A1106A82842437184F9AD9B656F3CA7BDA805FE6634C1163FA53C913D6FE8D03D102
CONTENT ssdeep	96:TXn0sf7VmCb9xCEu8Zw9nxss88z48jhlKkADWpVFgDCakRXMC70ZgEeZgtqZgCtu:Ln0sx7b9x8JQvh82UERkRchpG+i3tf/e

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	ec6c93934d199969
VISUAL aHash	ffd181d1f1ffffff
VISUAL dHash	2327272727462a4c
VISUAL wHash	b1818181d1abcbff
VISUAL colorHash	06000000180
VISUAL cropResistant	2327272727462a4c,8e0a988a98c89888

Análise de Código

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎯 Kit Endpoints

dr_login.php

📊 Detalhamento da Pontuação de Risco

Total Risk Score

40/100

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Civil Registration System (CRS India) Phishing Landing Page

Alvo

Civil Registration System (CRS India) users

Método de Ataque

Phishing webpage

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Análise de Falsificação de Marca

Impersonated Brand

Civil Registration System (CRS India)

Official Website

N/A

Fake Service

Token swap/DEX platform

⚔️ Metodologia de Ataque

Primary Method: Brand Impersonation Redirect

Impersonates Civil Registration System (CRS India) to build victim trust through search engine manipulation or malicious advertisements. Often redirects to credential theft pages or serves malware disguised as legitimate software.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio

crsorgi.gov.in.web.index.birthcetficate.co

Registered

2023-07-02 17:02:07+00:00

Registrar

OwnRegistrar, Inc.

Estado

Active (older domain)

Hosting Information

Provider