Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: GCI
⚠ Factores de Riesgo
- Suplantación de marca GCI en dominio no oficial
- Contiene 5 formulario(s) con envío JavaScript
- Ofuscación JavaScript detectada (7 patrones)
- Indicadores de robo de credenciales detectados
- Indicadores de robo de otp/2fa detectados
Visual Capture
Detection Info
https://att53.weebly.com/
Detected Brand
GCI
Country
USA
Confidence
100%
HTTP Status
200
Report ID
b2466425-166…
Analyzed
2026-01-08 08:00
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A5E11DF1D040ED3B435385D9A7B66B0B76A1C349CB431A4493F8C3AB5FDACA0CE15699 |
|
CONTENT
ssdeep
|
96:nkw4n/zD71tDlt8v67McdwSS8IGytmMTuzzOFsiXUHFKiX2z/1HYDd2J:kln/zD715lt8iIG6GyYMWDAz5Kdw |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3e64c991998e666 |
|
VISUAL
aHash
|
ffffffffffff0000 |
|
VISUAL
dHash
|
000c0c0808081008 |
|
VISUAL
wHash
|
3f272727e7e70000 |
|
VISUAL
colorHash
|
07600000006 |
|
VISUAL
cropResistant
|
000c0c0808080c00,0000000000000000 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings