EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of imm-ai-system.com

Información de Detección

https://imm-ai-system.com/
Detected Brand
Immediate AI (Financial/Trading)
Country
International
Confianza
100%
HTTP Status
200
Report ID
d9f2c6b7-659…
Analyzed
2026-08-05 23:17

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T198B2943261602A3B6157C3CD7262B76EE5E3934DDA960805A3FC478E8BD7ED0D81781B
CONTENT ssdeep
384:qtFy5NMgAnmWkuU19DYnJLOsIIIaiDO6BTjCri3gpsuRdUQ1R0IYsOy2+y9BH4cZ:qFy5NMNeYnJLOsIIIaiDO6BTjCr5suR0

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c3638c3ab269e596
VISUAL aHash
000020000400ffff
VISUAL dHash
9dc1c1cb6c0cf100
VISUAL wHash
00717060fe00ffff
VISUAL colorHash
31008000602
VISUAL cropResistant
0000084c4d4c3008,7168808030708000,9dcbc5cbc84c0471

Análisis de Código

Risk Score 76/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing Financiero/Inversiones
• Objetivo: Traders de criptomonedas
• Método: Suplantación de plataforma de trading
• Exfil: PII del usuario vía formulario
• Indicadores: Dominio nuevo, scripts ofuscados, lenguaje de marketing agresivo
• Riesgo: Alto - Robo de datos y posible fraude financiero

🔒 Obfuscation Detected

  • unescape
  • document.write

🎯 Kit Endpoints

  • login

📡 API Calls Detected

  • /app/register
  • POST

📊 Desglose de Puntuación de Riesgo

Total Risk Score
95/100

Contributing Factors

Domain Age
Domain is only 9 days old.
Technical Obfuscation
Detection of unescape/document.write obfuscation.
Brand Impersonation
Targeting financial trading space with generic branding.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
Immediate AI (Financial/Trading) users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 8 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Immediate AI
Official Website
N/A
Fake Service
Automated crypto trading

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential/PII Harvesting

The site uses a lead-generation form to collect personal information from users under the guise of an 'AI trading platform' to feed into subsequent phone or email scams.

Secondary Method: Obfuscated Exfiltration

Uses obfuscated JavaScript to hide the destination of collected user data.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
imm-ai-system.com
Registered
2026-07-27
Registrar
unknown
Estado
active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.