EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of noctiscapital.net

Información de Detección

https://noctiscapital.net/
Detected Brand
Noctis Capital
Country
International
Confianza
92%
HTTP Status
200
Report ID
d6c6b1ce-339…
Analyzed
2026-08-12 11:17

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1198274B2A040B83B0193C2E6B675636FA3D24689CD87171663FD8B9D0DE3D94FD1A119
CONTENT ssdeep
192:nWa44oCIIoT+BLxe3rL2eCYfWdaLMmTM4zb2mBq:Wa44oBIxe3jPfWdaD4

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c38d3833f6c6c398
VISUAL aHash
000078f8f8f04000
VISUAL dHash
dcd2c2c0c0c08080
VISUAL wHash
0402fefcfcfcf800
VISUAL colorHash
30000000e00
VISUAL cropResistant
a292ee2b2bda82a2,dcd2c2c0c0c08080

Análisis de Código

Risk Score 53/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer

🔬 Threat Analysis Report

• Amenaza: Estafa de Inversión Financiera
• Objetivo: Inversores
• Método: Suplantación de identidad / Recolección de credenciales
• Exfil: Envío de formulario JS ofuscado
• Indicadores: Dominio reciente, texto corporativo genérico
• Riesgo: Alto

🔒 Obfuscation Detected

  • unescape

📡 API Calls Detected

  • /api/sms-verification-status
  • /api/sms/send
  • POST
  • /api/sms/verify

📊 Desglose de Puntuación de Riesgo

Total Risk Score
92/100

Contributing Factors

Domain Age
Registered less than 30 days ago
Obfuscation
Detection of unescape/obfuscated JS
Suspicious Content
Generic corporate/financial scam language

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Two-Factor Authentication Stealer
Objetivo
Noctis Capital users (International)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: OTP Stealer
  • 2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Noctis Capital
Fake Service
Investment Portal

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Financial Fraud / Credential Harvesting

The site uses a deceptive, high-end financial appearance to build trust, followed by JS-based interception of user input to steal data.

Secondary Method: None

N/A

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
noctiscapital.net
Registered
2026-07-26
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.