This is a read-only demo. Deploy your own instance →
← Back
EXEC_ID: exec-p7q8r9

Analysis complete

Verdict ready.

▲ Threat Detected
smishing89% confidence
🔍 HUNTED — HITS FOUND
0:44total
$$13.50est. cost(45.8K tokens)
AI Screenshot AnalysisClaude Opus 4.6
16,030 in6,870 out
$5.40
Enrichment SummaryClaude Opus 4.6
9,160 in4,580 out
$3.38
Hunt in EnvironmentClaude Opus 4.6
5,496 in3,664 out
$4.72
Total$13.50
SarahSubmitted by Sarah
@
Screenshot
Submitted Screenshot
Click to enlarge
Threat Detectedsmishing

Smishing Analysis Report

Confidence89%

Netflix billing SMS with shortened URL. Redirects to credential harvester. 3 environment DNS hits.

Red Flags
Urgent language pressuring immediate action
Suspicious URL with typosquatting or unusual TLD
Unverified sender identity
Generic greeting without personalization
Indicators of Compromise
Type
Value
domain
netfl1x-billing.support
url
tinyurl.com/nf-bill
Enrichment Summary

IOC enrichment confirmed malicious activity. Primary indicators flagged by multiple reputation services.

Malicious Indicators
domainHIGH CONFIDENCE

netfl1x-billing.support

Flagged by reputation services as associated with smishing campaigns.

domainHIGH CONFIDENCE

tinyurl.com/nf-bill

Flagged by reputation services as associated with smishing campaigns.

Environment Threat Hunt

Environment Threat Hunt Results

IOC Hits Found

  • DNS Logs: 2-3 resolution events in last 7 days
  • Proxy Logs: 1 blocked connection attempt

Assessment

Environment exposure detected. Recommend investigation of affected hosts.