SafeMode - Analysis: goldenbitesmfp.in

EN ES PT

Back to Stats

Captura Visual

Screenshot of goldenbitesmfp.in

Información de Detección

http://goldenbitesmfp.in/www.plala.or.jp/Sites/index.html

Detected Brand

plala

Country

International

Confidence

95%

HTTP Status

200

Report ID

515f998e-0ee…

Analyzed

2026-02-27 07:00

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1A6910F1822853B4F999952A2D3752E94D3E2941EC7724C58B81EE72F1C8814EEC7F9FC
CONTENT ssdeep	96:A3ydpoIL/N+lglAtyHL5ZiNrft5CLJWfsT3yDSxyHJHAPboRbDv72oDSZQ:j2bcRM3a0v

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b2969b3131dccc99
VISUAL aHash	dfe7bdc3c3ffefff
VISUAL dHash	394c68049e600800
VISUAL wHash	1f273f3f03130303
VISUAL colorHash	07018000600
VISUAL cropResistant	394c68049e600800

Análisis de Código

Risk Score 53/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Usuarios de plala
• Método: Recopilación de credenciales
• Exfil: cgi-binsso/pf/agent_sso.php
• Indicadores: Discordancia de dominio, formulario de inicio de sesión, ofuscación
• Riesgo: ALTO

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

document.write

📤 Form Action Targets

cgi-binsso/pf/agent_sso.php

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Domain Mismatch

Domain name is unrelated to the brand being impersonated.

Form for Credentials

Requests sensitive information (email and password).

Suspicious JavaScript

Obfuscated code and form submission endpoint.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Credential Harvesting Kit

Objetivo

plala users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

plala

Official Website

https://www.plala.co.jp/

Fake Service

plala My Page Login

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The attacker aims to steal user credentials by creating a fake login page that closely resembles the legitimate service.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Domain

goldenbitesmfp.in

Registered

2023-03-05

Registrar

NameCheap

Status

active

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot

http://sobiznet.com/ww.plala.or.jp/Sites/index.html

Screenshot

https://indianplacements.co.in/www.plala.or.jp/Sites/index.h...

Screenshot

https://indianplacements.co.in/www.plala.or.jp/Sites/index.h...

Screenshot

https://hyperlink.cl/checkingupdate2025/Sites/index.html

Screenshot

https://kanodiadecor.com/mpp/Sites/index.html

Scan History for goldenbitesmfp.in

Found 1 other scan for this domain

https://goldenbitesmfp.in/ ? Feb 27, 2026 00:19

😰

"Nunca pensé que me pasaría a mí"

Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.