Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
No screenshot available
Información de Detección
https://helpdeskplpservice.com/
Detected Brand
Unknown
Country
International
Confidence
95%
HTTP Status
200
Report ID
4afc9357-324…
Analyzed
2026-02-23 10:24
Final URL (after redirects)
https://helpdeskplpservice.com/pages/ban.php
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DB31363653088C7FF111C398D7B0B279666A12CBDB462260C6EE576D9175D86DC3B1CC |
|
CONTENT
ssdeep
|
24:YSUR5N/+TN/0Ad0Zhw+P+Rdp57kaeJfThlkaeJYhlloVFL2/XJsJyz6MsJfcXJS8:k5NmTNMcOu5aJghl2BhzZScXJwyaviI4 |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c9c833b6cccc3687 |
|
VISUAL
aHash
|
f8f8f8d818030707 |
|
VISUAL
dHash
|
01000032321e5f9e |
|
VISUAL
wHash
|
fcf8f8f818070707 |
|
VISUAL
colorHash
|
38007000000 |
|
VISUAL
cropResistant
|
01000032321e5f9e |
Análisis de Código
Risk Score
50/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer
🔬 Threat Analysis Report
• Amenaza: Phishing
• Objetivo: No especificado
• Método: Engaño
• Exfil: Desconocido
• Indicadores: Dominio reciente, mensaje genérico
• Riesgo: Alto
📡 API Calls Detected
- ../actions/callback.php
📊 Desglose de Puntuación de Riesgo
Total Risk Score
90/100
Contributing Factors
Recent Domain
The domain was registered very recently.
Domain/Brand Mismatch
The domain name does not relate to any known service.
Generic Content
Generic 'access restricted' message, common phishing tactic.
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Two-Factor Authentication Stealer
Objetivo
General public
Método de Ataque
Phishing webpage
Canal de Exfiltración
Unknown
Evaluación de Riesgo
MEDIUM - Automated credential harvesting with Unknown
⚠️ Indicators of Compromise
- Kit types: OTP Stealer
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Unknown
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
The site likely attempts to steal login credentials or other sensitive information.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Domain
helpdeskplpservice.com
Registered
2024-02-16
Registrar
Unknown
Status
Active
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Unknown
https://cdn.gosafemode.com/screenshots/125352e084fe.png
Abr 08, 2026
Unknown
https://cdn.gosafemode.com/screenshots/d30cf47dd08d.png
Mar 31, 2026
Unknown
https://cdn.gosafemode.com/screenshots/0f44bc724154.png
Mar 31, 2026
No screenshot
Unknown
https://accessplpservice.com/
Feb 22, 2026
No screenshot
Unknown
https://helpdeskplpservice.com/pages/ban.php
Feb 19, 2026
Scan History for helpdeskplpservice.com
Found 5 other scans for this domain
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.