EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of ingresonuevoahorawe.com

Detection Info

https://ingresonuevoahorawe.com
Detected Brand
Banco Internacional
Country
International
Confidence
95%
HTTP Status
200
Report ID
66d2e9a7-ebd…
Analyzed
2026-02-27 16:39
Final URL (after redirects)
https://ingresonuevoahorawe.com/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T143D10F70D96CAD331253D2D6BAB29F1BB6D0C215DB826F0B46F8874C5FE6D04ED061A2
CONTENT ssdeep
96:imZqkY39EvsM90vMNd4Ioqk9XOxHFDbSW4hDEEnNS:imZqkY3KNdUqk9QDmW4BEEng

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c2863d3996c7898f
VISUAL aHash
0f343c7c7c000000
VISUAL dHash
ecece1f0f9939696
VISUAL wHash
ff7c7efe7c400000
VISUAL colorHash
01000038000
VISUAL cropResistant
ecece1f0f9939696,0103020141410100

Code Analysis

Risk Score 50/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Credential Phishing
• Target: Banco Internacional users
• Method: Impersonation of login page.
• Exfil: Stolen credentials
• Indicators: Unrelated domain, new domain, login form
• Risk: High

📡 API Calls Detected

  • handlers/check_status.php?t=
  • handlers/login_handler.php

📊 Risk Score Breakdown

Total Risk Score
95/100

Contributing Factors

Recent Domain
The domain is very recent.
Domain Mismatch
The domain does not match the brand.
Impersonation
The site is trying to look like the real Banco Internacional.

🔬 Comprehensive Threat Analysis

Threat Type
Credential Harvesting Kit
Target
Banco Internacional users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester

🏢 Brand Impersonation Analysis

Impersonated Brand
Banco Internacional
Fake Service
Banco Internacional Online Banking

⚔️ Attack Methodology

Primary Method: Credential Phishing

The attacker creates a fake login page that mimics the legitimate site. Users are tricked into entering their credentials, which are then stolen.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
ingresonuevoahorawe.com
Registered
2026-02-26 22:46:25+00:00
Registrar
None
Status
Inactive

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Unknown
https://cdn.gosafemode.com/screenshots/ad53903f81dd.png
May 26, 2026
 Screenshot
Banco Internacional
https://hysionglobal.com/ii/
May 23, 2026
 Screenshot
Banco Internacional
https://bagasen.click/xx/
May 14, 2026
 Screenshot
Banco Internacional
https://banesonline.webcindario.com/
Apr 17, 2026
 Screenshot
Banco Internacional
https://ingresoahoraneswes.com/
Mar 03, 2026
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.