SafeMode - Analysis: ingresoahoraneswes.fun

Captura Visual

Información de Detección

https://ingresoahoraneswes.fun/

Detected Brand

Banco Internacional

Country

International

Confianza

95%

HTTP Status

200

Report ID

9a41592e-831…

Analyzed

2026-03-02 22:24

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F1D10F70D96CAD331253D2D6BAB29F1BB6D0C215DB826F0B46F8874C5FE6D04ED061A2
CONTENT ssdeep	96:emZqkY39EvsM90vMNd4Ioqk9XOxHFDbSW4hDEEnNS:emZqkY3KNdUqk9QDmW4BEEng

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c2863d3996c7898f
VISUAL aHash	0f343c7c7c000000
VISUAL dHash	ecece1f0f9939696
VISUAL wHash	ff7c7efe7c400000
VISUAL colorHash	01000038000
VISUAL cropResistant	ecece1f0f9939696,0103020141410100

Análisis de Código

Risk Score 50/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Clientes de Banco Internacional
• Método: Imitación de una página de inicio de sesión
• Exfil: Credenciales
• Indicadores: Dominio no coincidente, formulario de inicio de sesión
• Riesgo: ALTO

📡 API Calls Detected

handlers/login_handler.php
handlers/check_status.php?t=

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Domain Mismatch

The domain does not belong to Banco Internacional.

Recent Domain

The domain is very recently registered.

Impersonation

The site visually impersonates the bank's login page.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Credential Harvesting Kit

Objetivo

Banco Internacional users (International)

Método de Ataque

Brand impersonation

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Banco Internacional

Fake Service

Online banking login

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The attacker sets up a fake login page that mirrors the legitimate Banco Internacional site. Victims are tricked into entering their credentials, which are then harvested by the attacker.