Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://grabixpro.trade/
Detected Brand
Grabix Pro
Country
International
Confianza
95%
HTTP Status
200
Report ID
1d81f94f-503…
Analyzed
2026-08-07 11:23
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12141942311045D2BA18343C9F760B67EB2D74386CA056518D5FE43B9C665D45FC372E4 |
|
CONTENT
ssdeep
|
48:bX8jBNTNmTNM9w0pD6ZR5BnqWiQRnkgB51GIiEHLTxeQx:Lc7wmD6ZZnWQRn7DxeE |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
db5e16191b263c99 |
|
VISUAL
aHash
|
083cffffffffe700 |
|
VISUAL
dHash
|
7048a0aa52080c0e |
|
VISUAL
wHash
|
0018ffffefdf0000 |
|
VISUAL
colorHash
|
07003000180 |
|
VISUAL
cropResistant
|
7048a0aa52080c0e |
Análisis de Código
Risk Score
3/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🔬 Threat Analysis Report
• Amenaza: Puerta de phishing
• Objetivo: Usuarios de Grabix Pro
• Método: Evasión de detección de bots
• Exfil: Desconocido (oculto tras puerta)
• Indicadores: Dominio nuevo, JS ofuscado, puerta sospechosa
• Riesgo: Alto
🔒 Obfuscation Detected
- unescape
📡 API Calls Detected
- POST
📊 Desglose de Puntuación de Riesgo
Total Risk Score
90/100
Contributing Factors
Domain Age
Domain is only 14 days old.
Obfuscation
Detection of obfuscated JS (unescape) to hide code.
Phishing Gate
Bot protection gate used to evade security scanners.
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Grabix Pro Phishing Landing Page
Objetivo
Grabix Pro users (International)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- 2 obfuscation techniques
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Grabix Pro
Official Website
Unknown
Fake Service
Service login/verification
Fraudulent Claims
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
The site uses a gatekeeper to hide its contents, likely to deliver a phishing form once the user interacts with the 'Bot Protection' check.
Secondary Method: Bot evasion
Using JS obfuscation and gating to avoid blacklist detection.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Dominio
grabixpro.trade
Registered
2026-07-23
Registrar
Unknown
Estado
Active
🤖 AI-Extracted Threat Intelligence
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.