Phishing Analysis
Detailed analysis of captured phishing page
90
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: Netflix
⚠ Factores de Riesgo
- Suplantación de marca Netflix en dominio no oficial
- Contiene 1 formulario(s) de captura de credenciales
- Indicadores de robo de otp/2fa detectados
- Indicadores de fraude bancario detectados
Visual Capture
Detection Info
https://sirusship.com/wp-content/wp/2900
Detected Brand
Netflix
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
8ea852b4-3aa…
Analyzed
2026-01-10 22:01
Final URL (after redirects)
https://sirusship.com/wp-content/wp/2900/app/index.php?view=index&id=b280975004b68a1a73271d08657030c1
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B0B1B870E218062B6C57C29EB5E54BF776A38360FE534288A1ED8A2516CFDD4CC6CD92 |
|
CONTENT
ssdeep
|
96:nm31KvAn990H1uNaqU4yDITC/FeJqDjnYC+Qhd1515:2Ku9k4/r0hdHH |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cccc667272993333 |
|
VISUAL
aHash
|
8018181800000000 |
|
VISUAL
dHash
|
2030303000100000 |
|
VISUAL
wHash
|
ecfc3c3c00000000 |
|
VISUAL
colorHash
|
38000000007 |
|
VISUAL
cropResistant
|
2030303000100000 |
Code Analysis
Risk Score
90/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer
🎣 Banking
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- fromCharCode
- unescape
- base64_strings
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for sirusship.com
Found 1 other scan for this domain