EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

https://aml-exchange365.com/
Detected Brand
AMLBot
Country
International
Confidence
100%
HTTP Status
200
Report ID
fbae6346-345…
Analyzed
2026-01-05 15:19

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T196B2723C310624A77173D9E3B30D3529B2B1B564DBB3F6C8E7E192384AD9CD94B64A18
CONTENT ssdeep
768:Efxe9P+CIUoFe/13odaW7mn2i5J+xrVQ7bmt:1+UJ+dYOt

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
eded139212ec4c96
VISUAL aHash
ffd1f1d1ffffe700
VISUAL dHash
388323b32c274c60
VISUAL wHash
ffc1c1c1dfff0000
VISUAL colorHash
060000001c0
VISUAL cropResistant
28132323b32c274c,070fc9c5d5b589b2,0529968eac940801,40104c6169165454

Code Analysis

Risk Score 100/100
Threat Level ALTO
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
Telegram Exfiltration WebSocket C2

🔬 Threat Analysis Report

• Threat: Potential credential harvesting or data exfiltration
• Target: Users of AMLBot
• Method: Likely to use a fake interface to collect information or inject malicious code
• Exfil: Data potentially sent to Telegram bot (token: 7759703904:AAHhyJL6eWVulMOhjnuNp_OeUtjngapHtew) and other WebSocket URLs
• Indicators: Obfuscated JavaScript, Telegram bot token, WebSocket URLs, JavaScript form submission detected, aml-exchange365.com domain
• Risk: HIGH - Potential for data theft and account compromise

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAHgAAAB4CAMAAAAOusbgAAAAaVBMVEVMaXGk3P8nnP1s2P+95f98yf7V8P4bk/3X8P/T7/4ypv7a7/7h9v/l+P/f9P/d8v7c8P/Y7v74/f/y+v/N6//u+P/T7f+05P/B6P+d2f6o3v6V0v5dyv9t2P9Lu/6Mzf06rf4qn/2DyP39woYbAAAAC3RSTlMATIeKFPe0/oHazbNcCVYAAAAJcEhZcwAACxMAAAsTAQCanBgAAAYbSURBVHic7Zltc6o6FIWlRYQGkoCIlept9f//yDt7J9lJSJTQc7hzP7B6Znqm7fi41n4hwm63adOmTZs2bdq06f+nPHvfX0H/oH5+fj7esv8A+367XR0ugJGdr8t9vxEXyT8KfL/fP95W594sl8iAfluXe1OGbYUV9b4m+R24nuMfB324H1YiZwF34viwDjnfI3gSNaLv2vHhkK8W9C3EKi4YXsfyXoNv4RQrLpLzlSp8Q+5H5r5+9mZKfDgcsrWSvl2v1/fp796Iu0LWe6pwwN3tPgz38PHXwTdyHEkzs5ZXAl+v12vklzk5/kvgPCvLoqiq6vPz8/Ns9Wl1Pp/H8XL5Ql0u4zhWVVUUZek14CLlZVFzzoVoh6HvLRl5vRL+dATyBbCXccQ/6Pt+GIaq/A07L+umaZq65qL1uL5jzzA6VuChZUKwtliMLkVzOiEXwYY7jufRQZ8t9/tbkwksBeesWjjYZd2crGF0jAwlxzthQUBGyxB1K4XgnA/lkpgLhW0abVhxCQzs8XweVXWR+3g8HkD2swZyW6XHXRG3xt5ymgi/rBzs4/sxATPJQW2RnDNwKWnrWJFQwEdZrrLsgFsmJZpuE9POau3X9haBL+OXYROWuAi+eGAp0+ucV9DOmgu9RU2NfkfsXYDiDGnu/rEHsBs1Zg1kIWSfUmZoLJWzMuw7/voCspGxC9Rpc4FlJEuRFHaOe0OD9eJyN5TDxRHS3D0lPZrNBWDjeZi3XOq+Uo6xxi3uRjO0ekt9W6527BgmxwssV+QXuDUXzK5q09W+X9tZzsqE5sKsgS2ELFKSNhXGGtuLxDlGdkfJqTAaRstoWsxnnbklJrA4daijo9NE6qdd1wwTMJKHuZ2trkkQswobyG2jqMBFtiZF0V3XccN1wO1ckUvHsOJybrkaewyh6o1ocqu5LWPIllLOgvXlAQ0jueb8SH4nCePEnxpL1p5PZFg1mJSSzXVX4TtGsKmvQpNbAsKV2w8buMwaZglgPU3GMGatkzat5Tp2DZv+OnYd2kUuDXOVBK498pHIJu5YiW1fdydbYdVgMh1suDU1l9Ne2F9RKvxB13FtWNc4Ccz8EiuynmJyrF0f/abSdruuoaT1SEGR+xlwPY1aeVavqNjuGrFIwz2ehOuXtlefAva4epgFvg4sTzpRW5kfDmaAkWf/x5aBUQ1OFGxORA8DsT/py2LdheU4louiVliyjGh4JYt2RVS7sHCWF0XduEHDEtFpC8GggGhbqR+QaKl6fpCrHavd1ac7xr2pwBotQFJHOABfvYfWeiWsLbFaIf2yqAlsLCO6piYHnWpt1YE6lpeCUWAasQaNcDPWFj0heo710uxTwJMKT8BmkTmqBYMPhxOurTFjS8DA1hcoy+VceDnrtSLYBGvBeqD6JTV2sIQWIuR2nXgetDryyT+NWjwDQ7dHWmtZjRvFbeLgSNSR7vIcszSwLW+st2LN1eBrPyMvq7HStMJPxkngyT0e9BJwrR03sLGmWPA8WSAimCU36V85rg13gjaSAj6SvezpRDDzamxzrkVItQqSnkYtZ8F02FPosLWmgg9GL3tar/AqAUwd7VTYu0qEhoN1+StwQ1Nsm/pV0vjCftYBuK0SPkkYbNBbQkTZAdc3rMDFHFgdqTV2vsRPwIHltkj5mKq6mrtngCdgGCaGp5IXjhFcJoF11NoxHUACshrjoKUjWQ9lyh2BoKdfJR3OUszxkCXdbYov6uet9RKMx8x+9n4Tdlf86PGkxC+3lnbczk2TLXJg+ElLRw8906Blwt3MnFONE0v86sJkyH3CzUxjObwUT9EJFyZjuJjn7nKGdiPn6SeOnx89iFwl3aQveSzqyBDHZji6L/vEJyIld+fJXCBCz3FwePpIfx5SKM/emSfOnSsxcudHySivdNrOhSleZBZeIOizmuEueuhVCgJHrxFqSUsB9+zw33SJmPtMbb/kudNut8uMaXvQAyA5x5zpbYTGDX4pd7fLC8Ep8OCAGzS44qrvGAJQh/6XjzUrhs/KQEHsxnkg3WFD3xe/wvrPj+leg3sDxFdvbsn88fPjTZs2bdq0adOmTbu/o38BVIyJazNDEm4AAAAASUVORK5CYII=

📡 API Calls Detected

  • https://ipwhois.app/json/
  • https://ip-api.com/json/?fields=countryCode
  • https://api.trongrid.io/wallet/broadcasttransaction
  • https://min-api.cryptocompare.com/data/pricemulti?fsyms=TRX,USDT&tsyms=USD
  • https://ip-api.io/json/
  • https://ipapi.co/json/
  • https://min-api.cryptocompare.com/data/pricemulti?fsyms=USDT&tsyms=USD
  • https://api.ipify.org?format=json
  • https://min-api.cryptocompare.com/data/pricemulti?fsyms=TRX&tsyms=USD
  • POST

🔑 Telegram Bot Tokens (1)

  • 7759703904:AAHh...ngapHtew

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
AMLBot
https://falas.pages.dev/
Jul 05, 2026
 Screenshot
AMLBot
https://trontest1.pages.dev/
Apr 11, 2026
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.