Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://flowminer.vercel.app/
Detected Brand
Pedágio Digital
Country
International
Confianza
100%
HTTP Status
200
Report ID
ab63388b-44a…
Analyzed
2026-02-13 01:38
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11BF1752211686D3B911343C8F392ABBE62C7C241CE452A0586F947AD0FF7DD4EE6B05A |
|
CONTENT
ssdeep
|
96:n7ThzTiiwhYWCKXBBJqmeImJ1kHUXixBE+1EnuN1zQyHCHlgR61rBxJ5exEIMH1R:dBv91sdBEwEuNuHvFeCIk1Tt |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
92966d69c36992c7 |
|
VISUAL
aHash
|
00043e2e3e0e0000 |
|
VISUAL
dHash
|
d5acececccdcb3b8 |
|
VISUAL
wHash
|
645e7e7f7e1e0800 |
|
VISUAL
colorHash
|
31400007000 |
|
VISUAL
cropResistant
|
23239c3335710dcc,d5acececccdcb3b8 |
Análisis de Código
Risk Score
73/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Personal Info
🔬 Threat Analysis Report
• Amenaza: Phishing
• Objetivo: Usuarios de Pedágio Digital
• Método: Suplantación de identidad a través de hosting gratuito.
• Exfil: debitos.html
• Indicadores: Hosting gratuito, logo de la marca, formulario, ofuscación.
• Riesgo: Alto
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- fromCharCode
📤 Form Action Targets
- debitos.html
📊 Desglose de Puntuación de Riesgo
Total Risk Score
90/100
Contributing Factors
Free Hosting
The site is hosted on a free hosting platform (vercel.app), a common tactic used by phishers.
Brand Impersonation
The site uses the Pedágio Digital logo and branding to appear legitimate.
Form Action
A form exists on the page indicating data harvesting
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Two-Factor Authentication Stealer
Objetivo
Pedágio Digital users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
HTTP POST to backend
Evaluación de Riesgo
HIGH - Automated credential harvesting with HTTP POST to backend
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Personal Info
- 4 obfuscation techniques
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Pedágio Digital
Fake Service
Access to payment control
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
The attacker attempts to collect the user's placa information by presenting a form on a fake website that mimics the official brand.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Dominio
flowminer.vercel.app
Registered
Unknown
Registrar
Unknown
Estado
Active
🔬 JavaScript Deep Analysis
Operator Language
English (1%)
Total Code Size
71,4 KB
🔗 API Endpoints Detected
Other
2
🔐 Obfuscation Detected
- : Light
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Pedágio Digital
https://www.guiafreeflowbr.com/
Jun 01, 2026
Pedágio Digital
https://pedagiosigadigitalflow.in.net/
Abr 16, 2026
Pedágio Digital
https://rodoviaspedagiadasbr.in.net/
Mar 24, 2026
Desconocido
https://cdn.gosafemode.com/screenshots/b5fe2e3922fb.png
Mar 23, 2026
Desconocido
https://cdn.gosafemode.com/screenshots/8be6c8e8bc45.png
Mar 23, 2026
Scan History for flowminer.vercel.app
Found 3 other scans for this domain
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.