SafeMode - Analysis: ingresoahoraneswes.com

Captura Visual

Información de Detección

https://ingresoahoraneswes.com/

Detected Brand

Banco Internacional

Country

International

Confianza

95%

HTTP Status

200

Report ID

2064c2ca-14f…

Analyzed

2026-03-03 00:40

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F1D10F70D96CAD331253D2D6BAB29F1BB6D0C215DB826F0B46F8874C5FE6D04ED061A2
CONTENT ssdeep	96:emZqkY39EvsM90vMNd4Ioqk9XOxHFDbSW4hDEEnNS:emZqkY3KNdUqk9QDmW4BEEng

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c2863d3996c7898f
VISUAL aHash	0f343c7c7c000000
VISUAL dHash	ecece1f0f9939696
VISUAL wHash	ff7c7efe7c400000
VISUAL colorHash	01000038000
VISUAL cropResistant	ecece1f0f9939696,0103020141410100

Análisis de Código

Risk Score 50/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Clientes de Banco Internacional
• Método: Impersonación de página de inicio de sesión
• Exfil: Credenciales de usuario
• Indicadores: Dominio reciente, discrepancia de dominio, formulario de inicio de sesión
• Riesgo: ALTO

📡 API Calls Detected

handlers/check_status.php?t=
handlers/login_handler.php

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Recent Domain

The domain was registered very recently.

Domain Mismatch

The domain is not related to the brand's official website.

Impersonation

The website attempts to impersonate the Banco Internacional login page.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Credential Harvesting Kit

Objetivo

Banco Internacional users (International)

Método de Ataque

Brand impersonation

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Banco Internacional

Fake Service

Online Banking Login

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The attacker is attempting to steal user credentials by mimicking the Banco Internacional login page. Users are tricked into entering their usernames.