EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats
70 Risk Score

High Risk

Threat Level: CRITICAL • Impersonating: Outlook
  • • Threat: Credential harvesting phishing attack
  • • Target: Outlook users
  • • Method: Fake login form stealing email and password
  • • Exfil: Data exfiltration destination unknown
  • • Indicators: Unofficial domain, impersonating Outlook
  • • Risk: HIGH - Immediate credential theft

⚠ Risk Factors

  • Brand impersonation of Outlook on non-official domain
  • Credential harvesting indicators detected
  • OTP/2FA stealing indicators detected

Visual Capture

Screenshot of pub-796f76b5c7b74957b18029807fe7c78e.r2.dev

Detection Info

http://pub-796f76b5c7b74957b18029807fe7c78e.r2.dev/ovva.html
Detected Brand
Outlook
Country
International
Confidence
100%
HTTP Status
200
Report ID
a0438df9-ee4…
Analyzed
2025-12-25 21:53
Final URL (after redirects)
https://pub-796f76b5c7b74957b18029807fe7c78e.r2.dev/ovva.html

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1A751F0619069AD735103E1E8ABE45F8F3283C706C687264852F4C37D2EF7C59DF56229
CONTENT ssdeep
48:vzQiHsUBJhhzIOiyX+oNa26HRDLlwoMXAPy9uiAM7Iy6BLPHwut1D:vznHsU9l+osbHlHFy9uiAMcBFPwuD

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
83f67f09090999fc
VISUAL aHash
3f3f3f3f3f3f3f3f
VISUAL dHash
d0ccccdad0d0d0d0
VISUAL wHash
3f273f3f3f0f0000

Code Analysis

Risk Score 70/100
Threat Level CRITICAL
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing attack
• Target: Outlook users
• Method: Fake login form stealing email and password
• Exfil: Data exfiltration destination unknown
• Indicators: Unofficial domain, impersonating Outlook
• Risk: HIGH - Immediate credential theft

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Outlook
http://pub-16499d352cc14fe4b8cdf064bb205547.r2.dev/4outmanag...
Jan 11, 2026
 Screenshot
Outlook
http://pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev/owa-webap...
Jan 11, 2026
 Screenshot
Outlook
http://pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev/Hr.Leave....
Jan 11, 2026
 Screenshot
Outlook
http://pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev/OWA-Ouloo...
Jan 11, 2026
 Screenshot
Outlook
http://pub-80fb550826904a048a5391946ef49a69.r2.dev/web.html
Jan 11, 2026

Scan History for pub-796f76b5c7b74957b18029807fe7c78e.r2.dev

Found 2 other scans for this domain