Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://coordinadores.ed-intra.com/
Detected Brand
Enlace Digital
Country
International
Confidence
92%
HTTP Status
200
Report ID
004c58f0-f0dā¦
Analyzed
2026-08-06 23:12
Final URL (after redirects)
https://coordinadores.ed-intra.com/Login/Login.php
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19B410E50410C0E3F505280D083756F3E22DE8272EE865F0AC7FA43699ED6F8ADDE71A4 |
|
CONTENT
ssdeep
|
48:twbOIukeYON7vn4jMR2CtY/EjFLwirEWQHK:ahub7vK98FLwhnq |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9973669899666699 |
|
VISUAL
aHash
|
00000018dbffffff |
|
VISUAL
dHash
|
10a94cb2b2b20c10 |
|
VISUAL
wHash
|
00000018faffffff |
|
VISUAL
colorHash
|
03007000000 |
|
VISUAL
cropResistant
|
10a94cb2b2b20c10 |
Code Analysis
Risk Score
53/100
Threat Level
ALTO
ā ļø Phishing Confirmed
š£ Credential Harvester
š¬ Threat Analysis Report
ā¢ Threat: Credential Harvesting
ā¢ Target: Enlace Digital employees/users
ā¢ Method: Fake login portal
ā¢ Exfil: JavaScript form submission
ā¢ Indicators: Obfuscated JS code, suspicious subdomain
ā¢ Risk: High
š Obfuscation Detected
- fromCharCode
š Risk Score Breakdown
Total Risk Score
92/100
Contributing Factors
Credential Harvesting
Form fields for sensitive user login
Domain Mismatch
Unrecognized domain for targeted brand
š¬ Comprehensive Threat Analysis
Threat Type
Credential Harvesting Kit
Target
Enlace Digital users (International)
Attack Method
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
ā ļø Indicators of Compromise
- Kit types: Credential Harvester
- 2 obfuscation techniques
š¢ Brand Impersonation Analysis
Impersonated Brand
Enlace Digital
Official Website
https://enlacedigital.com
Fake Service
Internal Portal Login
Fraudulent Claims
āļø Attack Methodology
Primary Method: Credential Harvesting
The site uses a deceptive login form to capture employee credentials.
Secondary Method: JavaScript Obfuscation
Code is obfuscated to hide the exfiltration logic of the credentials.
š Infrastructure Indicators of Compromise
Domain Information
Domain
ed-intra.com
Registered
2024-08-14
Registrar
Unknown
Status
Active
š¤ AI-Extracted Threat Intelligence
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.