EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats
100 Risk Score

High Risk

Threat Level: ALTO • Impersonating: Gabia

⚠ Risk Factors

  • Brand impersonation of Gabia on non-official domain
  • Contains 5 form(s) with JavaScript submission
  • JavaScript obfuscation detected (7 patterns)
  • Credential harvesting indicators detected
  • OTP/2FA stealing indicators detected

Visual Capture

Screenshot of turks-review.weebly.com

Detection Info

https://turks-review.weebly.com/
Detected Brand
Gabia
Country
International
Confidence
100%
HTTP Status
200
Report ID
d1a85427-18d…
Analyzed
2026-01-08 08:18

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1EAE102E0D054ED3B5363C5D5A7F56B1F3695C345CB020E4493F893BB6BCAC60CA229A9
CONTENT ssdeep
96:nkEUH+zH0XfeGHVgIttGdwvF/etXXqHFKubeVX2z/JUYwSgShjQPJ:kEUH+zH0X1HrtGx5qpyozWbqjQR

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b3b3130ce6e62699
VISUAL aHash
e7ffffffdb000000
VISUAL dHash
4c4c4c0c16080000
VISUAL wHash
e7ffffff42000000
VISUAL colorHash
07201000180
VISUAL cropResistant
4c4c4c0c16080000

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings