EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of globleeapex.online

Información de Detección

https://globleeapex.online/
Detected Brand
Global Apex Logistics
Country
International
Confianza
95%
HTTP Status
200
Report ID
9e74a30f-a13…
Analyzed
2026-08-25 11:38

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T182427232B0E03A3B0193D3D66BB4679BB3E28246DA67160223F5D31D4FDBE49DD42625
CONTENT ssdeep
192:c03Q/o2dfIOzQY92FtGZPul+iw28wmpa5OYo:cIZ21l8FteuC2bOf

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
96bcc9cbe198e292
VISUAL aHash
ff04141634343c7c
VISUAL dHash
383cbcb4ccc9f0c8
VISUAL wHash
ff0614163c343c7e
VISUAL colorHash
19600030000
VISUAL cropResistant
006220272738007c,e6d1e17098c84ccc,803a20eca98a9b34,72f47434b43636b6,c0d480a2aa80d003,f87cb4b4c8c9f8cc

Análisis de Código

Risk Score 53/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer

🔬 Threat Analysis Report

• Amenaza: Phishing/Captura de credenciales
• Objetivo: Clientes de Global Apex Logistics
• Método: Suplantación mediante dominio nuevo
• Exfil: Recolección ofuscada basada en JavaScript
• Indicadores: Dominio muy reciente, imágenes de archivo
• Riesgo: Alto

🔒 Obfuscation Detected

  • fromCharCode

📊 Desglose de Puntuación de Riesgo

Total Risk Score
90/100

Contributing Factors

Domain Age
Registered less than 7 days ago
Obfuscation
Detected use of fromCharCode to hide logic
Content
Suspicious business model description

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Two-Factor Authentication Stealer
Objetivo
Global Apex Logistics users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: OTP Stealer
  • 4 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Global Apex Logistics
Fake Service
Secure Logistics and Asset Protection

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site lures users with a professional logistics facade to harvest email and password data.

Secondary Method: Exfiltration via Webhooks

Uses obfuscated JS to send form input data to a remote collection server.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
globleeapex.online
Registered
2026-08-18
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.