SafeMode - Analysis: lavandbit-sammet.net

Captura Visual

No screenshot available

Información de Detección

https://lavandbit-sammet.net/

Detected Brand

Unknown

Country

International

Confianza

100%

HTTP Status

200

Report ID

3334c674-e16…

Analyzed

2026-07-30 11:13

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T194F27431A251AE3B44A792E5F3A5632F32E2938AC946034593FC43BD0BEBDC4FD26554
CONTENT ssdeep	768:65arxCCjXIq+qYAoAtz/IAxgogq0+TUxjAnMD:6AjXIq90+Te2MD

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	98ea43ea586bc33a
VISUAL aHash	f9ffdf9f9fff0000
VISUAL dHash	298435393dc92302
VISUAL wHash	81ff8f8f8ffd0000
VISUAL colorHash	07200030001
VISUAL cropResistant	29c83539393dc923,00000202420202c0,454551f4b4494141,00000066e4800000

Análisis de Código

Risk Score 76/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Fraude financiero/Phishing
• Objetivo: Público general/Inversores
• Método: Suplantación de plataforma de inversión con captura de leads
• Exfil: endpoint /create_lead/
• Indicadores: JS ofuscado y promesas genéricas de trading con IA
• Riesgo: Alto (cosecha de datos/pérdida financiera)

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

unicode_escape
base64_strings

📤 Form Action Targets

/create_lead/

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Domain Age

Site is only 80 days old

Code Obfuscation

Detected obfuscated JS logic

Content

Typical financial scam buzzwords

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Two-Factor Authentication Stealer

Objetivo

General public

Método de Ataque

credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Personal Info
33 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Lavandbit (Fictitious)

Fake Service

AI Trading Platform

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Lead Harvesting

The site collects contact information under the guise of an AI trading platform to feed into subsequent investment fraud campaigns.

Secondary Method: Deceptive Content

Use of high-tech buzzwords to lure unsophisticated investors.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

lavandbit-sammet.net

Registered

2026-05-11

Registrar