Phishing Analysis
Detailed analysis of captured phishing page
95
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: Mail Server
⚠ Risk Factors
- Brand impersonation of Mail Server on non-official domain
- Contains 2 credential harvesting form(s)
- Credential harvesting indicators detected
- OTP/2FA stealing indicators detected
- Uses Firebase for backend data storage
Visual Capture
Detection Info
https://cloud-a34c2.web.app/
Detected Brand
Mail Server
Country
International
Confidence
100%
HTTP Status
200
Report ID
5f91443a-055…
Analyzed
2026-01-09 08:37
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19E215950404CEC239566A1A9FF718786375FC7049B670B0017F5D25EFAC799ACD161CE |
|
CONTENT
ssdeep
|
24:kIjXC+Wi3eZvBD1/ioQCc2B59rDG5yN9OinbjeyN9eSXrWb:n6OezD1/ioQX2jBi5yHOinbjeyHekrWb |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
86a689999966e6b9 |
|
VISUAL
aHash
|
ff2666667e7e0000 |
|
VISUAL
dHash
|
f0ccccccd8cc0000 |
|
VISUAL
wHash
|
ff3666667e7e0000 |
|
VISUAL
colorHash
|
07380000000 |
|
VISUAL
cropResistant
|
f0ccccccd8cc0000,398d86e5cce5c34f |
Code Analysis
Risk Score
95/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Personal Info
🔥 Firebase Backend
🔒 Obfuscation Detected
- atob
- fromCharCode
- document.write
- base64_strings
☁️ Cloud Backend
- Firebase: cloud-a34c2.firebaseio.com
- Firebase: cloud-a34c2.firebaseapp.com
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
