Phishing Analysis
Detailed analysis of captured phishing page
91
Risk Score
High Risk
Threat Level: BAJO
• Impersonating: Scatto Bitrail
- • Threat: Potential cryptocurrency investment scheme.
- • Target: Italian residents.
- • Method: Promoting a trading platform using AI for cryptocurrency trading.
- • Exfil: Personal information is requested in a registration form.
- • Indicators: The domain name contains the brand name, but the concept is an investment offer.
- • Risk: LOW - The site isn't necessarily fraudulent, but users should exercise caution before investing.
⚠ Risk Factors
- Brand impersonation of Scatto Bitrail on non-official domain
- Contains 1 form(s) with JavaScript submission
- JavaScript obfuscation detected (2 patterns)
- OTP/2FA stealing indicators detected
- Banking fraud indicators detected
Visual Capture
No screenshot available
Detection Info
https://scattobitrail.net
Detected Brand
Scatto Bitrail
Country
Italy
Confidence
100%
HTTP Status
200
Report ID
3e592f65-a31…
Analyzed
2026-01-07 08:31
Final URL (after redirects)
https://scattobitrail.net/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F513963501429E7F21D3D2E4F375AB6AF298DB84C627EA46E3FC83291BCAC40DE51255 |
|
CONTENT
ssdeep
|
384:3uW6/7SllI44GX/sPUjPUHprMmEaXgkh7ucgvX7Pur5J8xIeKplGBCjDOqg1blOe:3m1PUjPUJjdlReWlHyLoPK |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ca16e9e9344bb643 |
|
VISUAL
aHash
|
0000040410fff9ff |
|
VISUAL
dHash
|
decccceca4239333 |
|
VISUAL
wHash
|
00000404fffff9ff |
|
VISUAL
colorHash
|
1b203008000 |
|
VISUAL
cropResistant
|
f4e0229080688080,80a080b030f080a0,8080803838a08080,a080a8acaca88080,00002a6969690620,0033331313033334,d6cccccccceca4a3,ccb0f06060e02169 |
Code Analysis
Risk Score
91/100
Threat Level
BAJO
🎣 OTP Stealer
🎣 Banking
🔬 Threat Analysis Report
• Threat: Potential cryptocurrency investment scheme.
• Target: Italian residents.
• Method: Promoting a trading platform using AI for cryptocurrency trading.
• Exfil: Personal information is requested in a registration form.
• Indicators: The domain name contains the brand name, but the concept is an investment offer.
• Risk: LOW - The site isn't necessarily fraudulent, but users should exercise caution before investing.
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- document.write
- unicode_escape
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
