Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: NexTech
⚠ Factores de Riesgo
- Suplantación de marca NexTech en dominio no oficial
- Contiene 1 formulario(s) con envío JavaScript
- Ofuscación JavaScript detectada (7 patrones)
- Indicadores de robo de credenciales detectados
- Indicadores de robo de otp/2fa detectados
Visual Capture
Detection Info
https://ruraltebwebmailinc.weebly.com/
Detected Brand
NexTech
Country
USA
Confidence
100%
HTTP Status
200
Report ID
0645c773-fd8…
Analyzed
2026-01-08 09:37
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F8F12FF0D051EE7B475385D4A7B66B0B7391C349CF021950A3F883AAABCACA0CF1659D |
|
CONTENT
ssdeep
|
192:kvHVlW0Rngk3zHJ1bcP2FUbKrtGyrLY/dFwd2lz1f:kvHVlW0GkjpdQ2aurtGwLY/dlvf |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cc88b3b3cca2b38e |
|
VISUAL
aHash
|
ff00181818000000 |
|
VISUAL
dHash
|
103232b232082000 |
|
VISUAL
wHash
|
ff1818181800ffff |
|
VISUAL
colorHash
|
33000000180 |
|
VISUAL
cropResistant
|
0000000000000000,3032b2b2320c1000 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings