EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

No screenshot available

Información de Detección

https://monicons.com/
Detected Brand
Unknown
Country
International
Confianza
100%
HTTP Status
200
Report ID
246d7109-a38…
Analyzed
2026-08-06 23:57

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1B57386717A01742731AF91CFD12B1A0D51C2E7CFCA955EC9A5F04369ABF2C94BAC22E4
CONTENT ssdeep
768:LAPfe+EN9/2xt6plwnGnead2jXHQB2uEnNNBAzoB5cO:LAXe+EN9/2xtUlxeakjXy9o0O

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
948e35744bde5a62
VISUAL aHash
0f0f3f3d00020200
VISUAL dHash
fc7ffd7986949493
VISUAL wHash
3f1f7f3f42464600
VISUAL colorHash
38000000180
VISUAL cropResistant
fc7ffd7986949493

Análisis de Código

Risk Score 79/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Recolección de credenciales/activos
• Objetivo: Usuarios generales/Crypto
• Método: Página de aterrizaje engañosa de 'Protección de activos'
• Exfil: JavaScript ofuscado para intercepción de datos
• Indicadores: Dominio reciente, código ofuscado
• Riesgo: Alto

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unicode_escape

📊 Desglose de Puntuación de Riesgo

Total Risk Score
92/100

Contributing Factors

Recent Domain
Domain is only 24 days old.
Technical Obfuscation
Detection of atob/fromCharCode used to hide malicious logic.
Suspicious Content
Generic 'Asset Protection' landing page with suspicious statistics.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
General public
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 936 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Generic Financial/Security
Fake Service
Asset Recovery/Protection

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site uses a deceptive security portal to entice users to connect wallets or provide account credentials.

Secondary Method: JavaScript Obfuscation

Hiding malicious redirection or data exfiltration logic within encoded JavaScript strings.

Target Blockchain
Multiple

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
monicons.com
Registered
2026-07-13
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.