Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: IONOS
⚠ Risk Factors
- Contains 1 Telegram bot token(s) for credential exfiltration
- Contains 4 credential harvesting form(s)
- Credential harvesting indicators detected
- OTP/2FA stealing indicators detected
Visual Capture
Detection Info
https://v1and1-ionos-info-2hyeo.ondigitalocean.app/
Detected Brand
IONOS
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
60593b75-e95…
Analyzed
2026-01-09 22:54
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11EA2C435D9104D6F42B347C8F298BA357192D808EAD182C8BBFD82245ED6DF3646993F |
|
CONTENT
ssdeep
|
384:9ZXg7Lq6VJ9La6VHXRYoZ7Fa4jYVqiFu3Fli:zuLq6pLa6F6u7FaJMiGFA |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b659664d4f393231 |
|
VISUAL
aHash
|
00ffc7ffffffffe7 |
|
VISUAL
dHash
|
32c09d3232302c2c |
|
VISUAL
wHash
|
00f8c0f8d8d0d0e0 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
72e29c7230302c2c,20320c727270b030 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Personal Info
Telegram Exfiltration
🔒 Obfuscation Detected
- atob
- fromCharCode
🔑 Telegram Bot Tokens (1)
- 1972379750:AAGJ...o6gEIfXg
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for v1and1-ionos-info-2hyeo.ondigitalocean.app
Found 2 other scans for this domain