SafeMode - Analysis: alisteronlinebanking.com

Captura Visual

No screenshot available

Información de Detección

https://alisteronlinebanking.com/

Detected Brand

Unknown

Country

International

Confianza

100%

HTTP Status

200

Report ID

796b9f29-89e…

Analyzed

2026-02-27 18:00

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F463353C63C1563550C783B2E594AF69D29CCF9ADB27AD8BF2ACC247178AC45CF52260
CONTENT ssdeep	768:P5CFfvqJ5kbfXHwo4xBg28Lavx1v3PZSGEWbjRBTeRCa:SfCJtTx1v3PPEWbM

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a9abd0bac0ead2d2
VISUAL aHash	ff0b0b2303030100
VISUAL dHash	dbd7d3d3d7d79390
VISUAL wHash	ff0b1b7b1303035a
VISUAL colorHash	07600008040
VISUAL cropResistant	4bdff3d3d3d7d7b3,2040838b73a36393,dfd3d3d3d7d39a90

Análisis de Código

Risk Score 82/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Usuarios de banca
• Método: Suplantación
• Exfil: Desconocido, probablemente para robar credenciales e información financiera. La ofuscación sugiere un intento de ocultar la exfiltración de datos.
• Indicadores: Discordancia de dominio, ofuscación de Javascript.
• Riesgo: ALTO

🔒 Obfuscation Detected

fromCharCode
hex_escape
unicode_escape
base64_strings

🎯 Kit Endpoints

https://alisteronlinebanking.com/login
https://alisteronlinebanking.com/verify
https://alisteronlinebanking.com/send-money

📡 API Calls Detected

https://libretranslate.com/translate
GET

📊 Desglose de Puntuación de Riesgo

Total Risk Score

95/100

Contributing Factors

Domain mismatch

The domain is not affiliated with a known bank.

JavaScript obfuscation

Obfuscation techniques are often used to hide malicious code from detection.

Form submission detected

Form submission and javascript obfuscation strongly indicates that data is being sent to external source

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

General public

Método de Ataque

obfuscated JavaScript

Canal de Exfiltración

Unknown

Evaluación de Riesgo

CRITICAL - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
49 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Alister Bank

Fake Service

Online Banking

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site likely attempts to harvest login credentials. The user is prompted to 'Login to Banking' or 'Open Account Today', and these links likely lead to forms. Obfuscated javascript often accompanies these form submissions to exfiltrate user's information.