Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: Mail.com
⚠ Risk Factors
- Brand impersonation of Mail.com on non-official domain
- Contains 5 form(s) with JavaScript submission
- JavaScript obfuscation detected (7 patterns)
- Credential harvesting indicators detected
- OTP/2FA stealing indicators detected
Visual Capture
Detection Info
https://0997564mail.weebly.com/
Detected Brand
Mail.com
Country
International
Confidence
100%
HTTP Status
200
Report ID
0a5d635d-72a…
Analyzed
2026-01-07 10:22
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12EE1DFE0C414EE37436385D99BF56B0B73D1C349CF421D4493F883AB5BCAC60DA659A9 |
|
CONTENT
ssdeep
|
96:nkJCEzeFvMSfuSTCctutQ+sSS8lbKBFdTPiXbHF8KXeHFN+XLX/mYfYfGJ:kJCEzeFdjWcktQ+3bwDUecXesuA |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8350f682fcff0658 |
|
VISUAL
aHash
|
ff6f0808183f7fff |
|
VISUAL
dHash
|
02d9785af1cd5a00 |
|
VISUAL
wHash
|
ff2f000400273fff |
|
VISUAL
colorHash
|
06001000180 |
|
VISUAL
cropResistant
|
02d9785af1cd5a00,e0101e2c2c2c2c2c,70c0b2e0e0b2c071,f0c0b2a0e0b2c0f0,cfc1395959588600,1771c0d4d4407016,1771c0d4d4607107,d34f989b9a9a9a9a |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings