Phishing Analysis
Detailed analysis of captured phishing page
100
Risk Score
High Risk
Threat Level: ALTO
• Impersonating: Mail.de
⚠ Fatores de Risco
- Falsificação da marca Mail.de em domínio não oficial
- Contém 5 formulário(s) com submissão JavaScript
- Ofuscação JavaScript detectada (7 padrões)
- Indicadores de roubo de credenciais detectados
- Indicadores de roubo de otp/2fa detectados
Visual Capture
Detection Info
https://1weenamesooi22939.weebly.com/
Detected Brand
Mail.de
Country
Germany
Confidence
100%
HTTP Status
200
Report ID
ec5cffca-ab6…
Analyzed
2026-01-08 07:54
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B7E110E0C414EE37435385D89BF5AB0B77D1C349CF420D44A3F883AB9BCAC60DA655A9 |
|
CONTENT
ssdeep
|
96:nkJvEzeFvMS0uSTCctutQ/SS8lWpeIFIWXVHFGSXuHFljyXA5X/iDWSRJYfYfGJ:kJvEzeFdKWcktQMWpeCUZXcsuA |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
fad034c585c5d98d |
|
VISUAL
aHash
|
c7859dbdb9b98181 |
|
VISUAL
dHash
|
050d39616179353d |
|
VISUAL
wHash
|
e7859db9b9998181 |
|
VISUAL
colorHash
|
03003000180 |
|
VISUAL
cropResistant
|
050d39616179353d,a000000000888808,34c54b2a26b6bcb6,84481024404442a4,2428484100434e52,318953d2a6a44c4d,026a6ab495b5252d,545554545455a5a5 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings