Phishing Analysis
Detailed analysis of captured phishing page
75
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: Netflix
⚠ Risk Factors
- Brand impersonation of Netflix on non-official domain
- Contains 1 Telegram bot token(s) for credential exfiltration
- Contains 1 form(s) with JavaScript submission
- Credential harvesting indicators detected
Visual Capture
Detection Info
https://amd.pgu.mybluehost.me/veri/
Detected Brand
Netflix
Country
International
Confidence
95%
HTTP Status
200
Report ID
bb89d0df-6be…
Analyzed
2026-01-07 08:46
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1430272A0D2940A2E508789CDDB22EB5E63C6C146E3164F89A7BC977B7D4EC80ED52188 |
|
CONTENT
ssdeep
|
192:BUQiocSwcuGx8ku5lYQGNa4b2oDq733RKsteMj:+QiuuGNaSt2eMj |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e2ce00b05d4dd55f |
|
VISUAL
aHash
|
5367f69dede70000 |
|
VISUAL
dHash
|
a38d4d35098c8d10 |
|
VISUAL
wHash
|
d367b787e7e70000 |
|
VISUAL
colorHash
|
39600008040 |
|
VISUAL
cropResistant
|
a38d4d35098c8d10 |
Code Analysis
Risk Score
75/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
Telegram Exfiltration
🔑 Telegram Bot Tokens (1)
- 8027100720:AAF9...2cNXW4fw