Phishing Analysis
Detailed analysis of captured phishing page
94
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: BT Means Business
⚠ Risk Factors
- Brand impersonation of BT Means Business on non-official domain
- Contains 2 credential harvesting form(s)
- JavaScript obfuscation detected (3 patterns)
- Credential harvesting indicators detected
- OTP/2FA stealing indicators detected
Visual Capture
Detection Info
https://linky.ph/bt_brandEE
Detected Brand
BT Means Business
Country
UK
Confidence
100%
HTTP Status
200
Report ID
5548224d-839…
Analyzed
2026-01-07 09:36
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T141E19672E0184D2B058382D4FBA5BB4AE2A5C346C6491740F1FD53AD1AC7DB4FA96391 |
|
CONTENT
ssdeep
|
192:6ep44UCfb1Do+nWG9PnKCmu2LInoLeLRt:UCjRznWLCuIdRt |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
885dd871713173ce |
|
VISUAL
aHash
|
1b1f1f070f0f0f0f |
|
VISUAL
dHash
|
77737bffffffffff |
|
VISUAL
wHash
|
1b1f1f07070f0f0f |
|
VISUAL
colorHash
|
00002400010 |
|
VISUAL
cropResistant
|
ff9f9fffffffffff,71c0b8e6e2b0e071,ff9680969680b6ff,69387c6fffffffff |
Code Analysis
Risk Score
94/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- atob
- fromCharCode
- base64_strings