Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://golvurikenzbelgium-nl.live/
Detected Brand
Unknown
Country
Unknown
Confianza
100%
HTTP Status
200
Report ID
9b56a920-ef4…
Analyzed
2026-07-18 11:45
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A63355721185AA2F004342E6D72CFA6ED3C5D70DCBA39E87A6F8C32751CADE4EE25154 |
|
CONTENT
ssdeep
|
768:USMlgAE0c8cb8grDMLQEXnYYkcgIQ73eMlgAE0c8cb8grDMLQEXnYYkcgIQ73t0K:q8c00pyeaWvU0vxTAa8C |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bc3ce7c3b01c9698 |
|
VISUAL
aHash
|
fb839f9fdfffffff |
|
VISUAL
dHash
|
432b3434b054304d |
|
VISUAL
wHash
|
00001e1e5e1edfe7 |
|
VISUAL
colorHash
|
07180000200 |
|
VISUAL
cropResistant
|
432b3434b054304d,5a9989cbcd4d45e5 |
Análisis de Código
Risk Score
86/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- fromCharCode
- unescape
🎯 Kit Endpoints
- data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAzODAgNjIwIj4KICAgIDxyZWN0IHg9IjAiIHk9IjAiIHdpZHRoPSIzODAiIGhlaWdodD0iNjIwIiByeD0iMTgiIHJ5PSIxOCIgZmlsbD0iI2ZmZmZmZiIvPgoKICAgIDx0ZXh0IHg9IjE5MCIgeT0iNDYiIHRleHQtYW5jaG9yPSJtaWRkbGUiIGZvbnQtZmFtaWx5PSJBcmlhbCIgZm9udC1zaXplPSIyMSIgZm9udC13ZWlnaHQ9IjcwMCIgZmlsbD0iIzAwMCI+CiAgICAgICAgQmVsYW5ncmlqa2Uga2VubmlzZ2V2aW5nCiAgICA8L3RleHQ+CgogICAgPGZvcmVpZ25PYmplY3QgeD0iMTgiIHk9IjcwIiB3aWR0aD0iMzQ0IiBoZWlnaHQ9IjQ1MCI+CiAgICAgICAgPGRpdiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94aHRtbCIgc3R5bGU9IgogICAgICAgICAgICBmb250LWZhbWlseTogQXJpYWw7CiAgICAgICAgICAgIGZvbnQtc2l6ZTogMTNweDsKICAgICAgICAgICAgY29sb3I6ICMyYTJhMmE7CiAgICAgICAgICAgIGxpbmUtaGVpZ2h0OiAxLjY7CiAgICAgICAgICAgIHdvcmQtYnJlYWs6IGJyZWFrLXdvcmQ7CiAgICAgICAgIj4KICAgICAgICAgICAgPHAgc3R5bGU9Im1hcmdpbjowIDAgMThweCAwOyI+R09MVlVSSUtFTlogQkVMR0lVTSBpcyBlZW4gYWxnZW1lbmUgd2Vic2l0ZSBkaWUgdWl0c2x1aXRlbmQgd29yZHQgZ2VicnVpa3Qgdm9vciBtYXJrZXRpbmctIGVuIGluZm9ybWF0aWV2ZSBkb2VsZWluZGVuLjwvcD4KICAgICAgICAgICAgPHAgc3R5bGU9Im1hcmdpbjowIDAgMThweCAwOyI+RGV6ZSB3ZWJzaXRlIGVuIGhhYXIgZXhwbG9pdGFudCBiaWVkZW4gZ2VlbiBoYW5kZWxzLSwgbWFrZWxhYXJzLSwgaW52ZXN0ZXJpbmdzLSwgZmluYW5jaWVlbCBhZHZpZXMtIG9mIHBvcnRlZmV1aWxsZWJlaGVlcmRpZW5zdGVuIGFhbi48L3A+CiAgICAgICAgICAgIDxwIHN0eWxlPSJtYXJnaW46MCAwIDE4cHggMDsiPgogICAgICAgICAgICAgICAgRG9vciB1dyBnZWdldmVucyBpbiB0ZSBkaWVuZW4sIGt1bnQgdSB3b3JkZW4gZ2Vjb250YWN0ZWVyZCBkb29yIGVlbiBvbmFmaGFua2VsaWprZSBleHRlcm5lIGRpZW5zdHZlcmxlbmVyIGRpZSBhbGdlbWVuZSBpbmZvcm1hdGllLAogICAgICAgICAgICAgICAgZWR1Y2F0aWVmIG1hdGVyaWFhbCwgbWFya3RnZXJlbGF0ZWVyZGUgaW5ob3VkIG9mIGFuZGVyZSBkaWVuc3RlbiBtZXQgYmV0cmVra2luZyB0b3QgZmluYW5jacOrbGUgaW5zdHJ1bWVudGVuLCBncm9uZHN0b2ZmZW4gb2YgY3J5cHRvLWFjdGl2YSBrYW4gYWFuYmllZGVuLgogICAgICAgICAgICAgICAgRGVyZ2VsaWprZSBkaWVuc3RlbiBrdW5uZW4ga29zdGVuIG1ldCB6aWNoIG1lZWJyZW5nZW4uIExlZXMgZGUgYWxnZW1lbmUgdm9vcndhYXJkZW4gZW4gYWxsZSBpbmZvcm1hdGllIGRpZSBkb29yIGRlIGJldHJlZmZlbmRlIGRpZW5zdHZlcmxlbmVyIHdvcmR0IHZlcnN0cmVrdCB6b3JndnVsZGlnIGRvb3IuCiAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgPHAgc3R5bGU9Im1hcmdpbjowIDAgOHB4IDA7Ij4KICAgICAgICAgICAgICAgIERlemUgd2Vic2l0ZSBlbiBoYWFyIGV4cGxvaXRhbnQgY29udHJvbGVyZW4gbmlldCBkZSByZWd1bGVyaW5nc3N0YXR1cywgbGljZW50aWVzLCB3ZXJrd2lqemUgb2Ygd2V0dGVsaWprZSBuYWxldmluZyB2YW4gZXh0ZXJuZSBkaWVuc3R2ZXJsZW5lcnMuCiAgICAgICAgICAgICAgICBEZXplIHdlYnNpdGUgZW4gaGFhciBleHBsb2l0YW50IHppam4gbmlldCB2ZXJhbnR3b29yZGVsaWprIHZvb3IgZW5pZyB2ZXJsaWVzLCBzY2hhZGUsIGp1cmlkaXNjaCBwcm9ibGVlbSBvZiByZWdlbGdldmluZ3Nwcm9ibGVlbSBkYXQgdm9vcnR2bG9laXQgdWl0IHV3IGludGVyYWN0aWUgbWV0IGVlbiBkZXJkZSBwYXJ0aWouCiAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgPHAgc3R5bGU9Im1hcmdpbjowOyI+CiAgICAgICAgICAgICAgICBGaW5hbmNpw6tsZSBtYXJrdGVuIGVuIGNyeXB0by1hY3RpdmEgYnJlbmdlbiBhYW56aWVubGlqa2UgcmlzaWNv4oCZcyBtZXQgemljaCBtZWUsIGluY2x1c2llZiBoZXQgbW9nZWxpamtlIHZlcmxpZXMgdmFuIGFsbGUgZm9uZHNlbi4KICAgICAgICAgICAgPC9wPgogICAgICAgIDwvZGl2PgogICAgPC9mb3JlaWduT2JqZWN0PgoKICAgIDx0ZXh0IHg9IjM2MCIgeT0iMjgiIHRleHQtYW5jaG9yPSJlbmQiIGZvbnQtZmFtaWx5PSJBcmlhbCIgZm9udC1zaXplPSIxOSIgZm9udC13ZWlnaHQ9IjcwMCIgZmlsbD0iIzAwMCI+CiAgICAgICAgw5cKICAgIDwvdGV4dD4KPC9zdmc+
- data:image/svg+xml;base64,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
📡 API Calls Detected
- POST
📤 Form Action Targets
- https://golvurikenzbelgium-nl.live/submit-form
📊 Desglose de Puntuación de Riesgo
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Banking
Credential Harvesting
Credential harvesting detected with 4 form(s) capturing sensitive data
Code Obfuscation
JavaScript code obfuscated using 6 technique(s) to evade detection
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Banking Credential Harvester
Objetivo
General public
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
HTTP POST to backend
Evaluación de Riesgo
CRITICAL - Automated credential harvesting with HTTP POST to backend
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking
- 6 obfuscation techniques
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Generic Phishing
Official Website
N/A
Fake Service
Banking/payment service
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 6 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Dominio
golvurikenzbelgium-nl.live
Registered
Unknown
Registrar
Unknown
Estado
Age unknown
Hosting Information
Provider
Unknown
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.