EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats
100 Risk Score

High Risk

Threat Level: ALTO • Impersonating: Windstream

⚠ Risk Factors

  • Brand impersonation of Windstream on non-official domain
  • Contains 5 form(s) with JavaScript submission
  • JavaScript obfuscation detected (7 patterns)
  • Credential harvesting indicators detected
  • OTP/2FA stealing indicators detected

Visual Capture

Screenshot of webmail-erty5.weebly.com

Detection Info

https://webmail-erty5.weebly.com/
Detected Brand
Windstream
Country
USA
Confidence
100%
HTTP Status
200
Report ID
fbdcd4c1-9f8…
Analyzed
2026-01-08 08:11

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T144E10FF0D050ED3B435386D9A7BA6B0BB691C749CF031A4593F883AB9FCAC60CE15599
CONTENT ssdeep
96:nkZn/zD71tDlt8v67Mcddta96sLfCFNdXOXDHFAOXvz/4YRf2J:kZn/zD715lt8iIGd896sLUVMHzgKfw

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b1b16c6ce6321a9e
VISUAL aHash
ffffffffff000000
VISUAL dHash
960e480810000000
VISUAL wHash
c3e7ffe7ff000000
VISUAL colorHash
070000001c0
VISUAL cropResistant
16960814080c0008,2020202020200040,0000000000000000

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings