EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats
100 Risk Score

High Risk

Threat Level: ALTO • Impersonating: AT&T

⚠ Risk Factors

  • Brand impersonation of AT&T on non-official domain
  • Contains 2 form(s) with JavaScript submission
  • JavaScript obfuscation detected (7 patterns)
  • Credential harvesting indicators detected
  • OTP/2FA stealing indicators detected

Visual Capture

Screenshot of nowaja1486.wixsite.com

Detection Info

https://nowaja1486.wixsite.com/attx?$web_only=true
Detected Brand
AT&T
Country
USA
Confidence
100%
HTTP Status
200
Report ID
c77e2a21-705…
Analyzed
2026-01-09 08:36

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T19082F9A025312C3A36575AEDE66B77895183F91DF6C0892075E823CC0BC7CBA258377E
CONTENT ssdeep
384:+fRc6tdwI9asYi1tltqWMB79XXSM8Bo1tltqWMB79X8SM8Bq/ltqW79VXSM8Bo/D:+Bcsasl1tM8Bo18M8BquM8BorM8BH

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
e666cc6465cc6c66
VISUAL aHash
02e7e7ffe7e7ffff
VISUAL dHash
06080c104d0c0016
VISUAL wHash
00c3c3c3c3c3ffc3
VISUAL colorHash
07000000180
VISUAL cropResistant
06080c104d0c0016

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings