Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: ProtonMail
⚠ Risk Factors
- Brand impersonation of ProtonMail on non-official domain
- Contains 1 credential harvesting form(s)
- Credential harvesting indicators detected
- OTP/2FA stealing indicators detected
Visual Capture
Detection Info
https://oluwarantinmialafia.godaddysites.com/
Detected Brand
ProtonMail
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
423d2ec6-d5f…
Analyzed
2026-01-09 22:34
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F452F052210C5A55C2F34CD998503A80B182D64FC8719770D6BC4E7B1BE2BA1B7ADF7E |
|
CONTENT
ssdeep
|
192:j7ory67aQJHjbD1jZtghv3MxqiWUajwlXdLyOqh5xrL7aajwxPXhPOeRQjJX8YDj:/fQJLj5a17av7Kykbht |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f2a55264255e8ece |
|
VISUAL
aHash
|
c3c3ffc3c3fcfcfc |
|
VISUAL
dHash
|
9e9e009696000808 |
|
VISUAL
wHash
|
03030303c280f0f0 |
|
VISUAL
colorHash
|
07007400000 |
|
VISUAL
cropResistant
|
9e9e009696000808,0008303232000000,4cc4d2909ac80422 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- fromCharCode
- document.write
- base64_strings