Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
No screenshot available
Información de Detección
https://instantevistaai.net/
Detected Brand
Unknown
Country
International
Confianza
100%
HTTP Status
200
Report ID
89de3d0b-caf…
Analyzed
2026-02-23 15:45
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T182A3EE234259752A4077C3D430BA1F3BD1AA994BFAE709414EDCC7F62BFAC50702B699 |
|
CONTENT
ssdeep
|
768:YNw9tMbXReQ/GJi55RPGOrb8o7mJ/ee0Vqcnn:v9tMbXlOJi55R+Ov8o7mJX0Vqcnn |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9612ed690d6f1693 |
|
VISUAL
aHash
|
00040e060600ffff |
|
VISUAL
dHash
|
d77cecccbc0c0326 |
|
VISUAL
wHash
|
000e0e0e0e8effff |
|
VISUAL
colorHash
|
02003400400 |
|
VISUAL
cropResistant
|
bc6cecccbc0c0026,dcbd6cececccac7c,1c07432513161c3c |
Análisis de Código
Risk Score
73/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Amenaza: Phishing
• Objetivo: Individuos
• Método: Formularios para robar datos
• Exfil: Desconocido
• Indicadores: Dominio nuevo, Solicitud de datos, Marca no clara
• Riesgo: ALTO
🔒 Obfuscation Detected
- unicode_escape
📡 API Calls Detected
- ./form/handle_form.php
- https://amos-mamaya.fun/geo
📊 Desglose de Puntuación de Riesgo
Total Risk Score
90/100
Contributing Factors
Recent Domain
The domain is very recent.
Requests Personal Info
Requests Personally Identifiable Information
No Clear Brand Identity
No established brand or reputation.
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Banking Credential Harvester
Objetivo
General public
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: OTP Stealer, Banking, Personal Info
- 31 obfuscation techniques
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Unknown
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
The site uses a form to collect personal information from users under the guise of an account sign-up.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Dominio
instantevistaai.net
Registered
2024-02-12
Registrar
Unknown
Estado
Active
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.