EN ES PT
Back to Stats

Captura Visual

Screenshot of site-1enk6s1fm.godaddysites.com

Información de Detección

https://site-1enk6s1fm.godaddysites.com/
Detected Brand
BT/EE
Country
UK
Confidence
100%
HTTP Status
200
Report ID
51d225ff-e1d…
Analyzed
2026-02-01 17:29

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1A232134622083965C2F3489994507684B387DF4FC9618B7086BC5E3F1FD2AA2A795F3F
CONTENT ssdeep
192:cQO0YOryHjbI1jetPCZw7yBNQ6VyNU4JQMdBCWvoacsLjwpcBlb5h1oQ46X8Yz+h:2OryZdiy3Bg6BR+FhoQ

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
d2a5528dad5aad52
VISUAL aHash
e7e7e7fffffcfcfc
VISUAL dHash
4d4d4d000c000808
VISUAL wHash
e0e0e680f3f0f0f0
VISUAL colorHash
070000004c0
VISUAL cropResistant
4d4d4d000c000808,455105f4b4a44145,c9c8b0b09088aa8e

Análisis de Código

Risk Score 76/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Clientes de BT/EE
• Método: Suplantación de identidad a través de alojamiento gratuito.
• Exfil: Desconocido (probablemente credenciales)
• Indicadores: Alojamiento gratuito, logotipos de marca, llamado a la acción para ver la factura
• Riesgo: ALTO

🔒 Obfuscation Detected

  • fromCharCode
  • unicode_escape

🎯 Kit Endpoints

  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:120,h:120,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:72,h:72,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:60,h:60,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:180,h:180,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:57,h:57,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:144,h:144,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:152,h:152,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=w:114,h:114,m
  • //img1.wsimg.com/isteam/ip/7a17d71d-8d60-4865-9278-d2e9a6eb3bfb/BT%20%26%20EE%20NEW%20LOGO.jpeg/:/rs=h:182,cg:true,m/qt=q:100/ll

📊 Desglose de Puntuación de Riesgo

Total Risk Score
90/100

Contributing Factors

Free Hosting
The site is hosted on godaddysites.com, a free hosting service.
Brand Impersonation
The site uses the BT/EE logo and branding to impersonate the legitimate company.
Suspicious Content
The call to action 'Log in to view your bill' is a phishing trigger

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
BT/EE users (UK)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 16 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
BT/EE
Official Website
https://www.bt.com or https://www.ee.co.uk
Fake Service
Viewing your bill

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The attacker is likely attempting to steal login credentials. A user clicking on the call to action may be redirected to a fake login page.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Domain
site-1enk6s1fm.godaddysites.com
Registered
2013-11-18
Registrar
GoDaddy.com, LLC
Status
active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.