Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: cloudbeds
⚠ Factores de Riesgo
- Contiene 1 token(s) de bot Telegram para exfiltración de credenciales
- Contiene 1 formulario(s) de captura de credenciales
- Indicadores de robo de credenciales detectados
- Indicadores de robo de otp/2fa detectados
- Usa Supabase para almacenamiento de datos
Visual Capture
Detection Info
https://secure-cloudbeds-hotel-aut.bolt.host/
Detected Brand
cloudbeds
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
560d94d2-af8…
Analyzed
2026-01-11 02:49
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B522C4BD2103696B610FDBE0B5A6EB19289C839BEFDB182E547D49B637C1CF0D61A110 |
|
CONTENT
ssdeep
|
192:qytojo66+QwzqtFknA9kb7BksrpCd3PhLmHBDKBsne908Rb8WHFz1cg9b8jbI:qnQwzqtFknA9kb7BksrpCd35LmHBDKey |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
dd0866e619d9cd26 |
|
VISUAL
aHash
|
00001818ffffffff |
|
VISUAL
dHash
|
d28cb2b232b2b280 |
|
VISUAL
wHash
|
000018183cffffff |
|
VISUAL
colorHash
|
06007000000 |
|
VISUAL
cropResistant
|
d28cb2b232b2b280 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
Telegram Exfiltration
⚡ Supabase Backend
🔒 Obfuscation Detected
- fromCharCode
🔑 Telegram Bot Tokens (1)
- 8454310166:AAE3...8koH4Bow
☁️ Cloud Backend
- Supabase: lvsiyqcbqhsvplptqait.supabase.co
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for secure-cloudbeds-hotel-aut.bolt.host
Found 1 other scan for this domain