EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of primeroyaltrustcapital.com

Información de Detección

https://primeroyaltrustcapital.com/
Detected Brand
Prime Royal Trust Capital
Country
International
Confianza
100%
HTTP Status
200
Report ID
eee54341-b26…
Analyzed
2026-08-28 01:02

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1D473B7704246461AE697E1C0FE329B4A53958305C3074D6CB7F36927FE8ED78ED3A6A0
CONTENT ssdeep
1536:JE45csK4usrGbSntyVAtJUL2Ydgh6XEiPEeeekeee8eeeQeeefeeeZeeepeeefe5:JdEgP6n

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
db95f2e2a1c8cce0
VISUAL aHash
ff001808091800fd
VISUAL dHash
793830535ba33919
VISUAL wHash
ff08183969d880ff
VISUAL colorHash
00038000000
VISUAL cropResistant
0041696161690078,8080422b29808080,3939393939398a04,3838305b5ba3b939

Análisis de Código

Risk Score 79/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing Financiero
• Objetivo: Credenciales bancarias
• Método: Suplantación de institución financiera ficticia
• Exfil: Envío de formulario JavaScript
• Indicadores: Código ofuscado y dominio de alto riesgo
• Riesgo: Alto

🔒 Obfuscation Detected

  • fromCharCode
  • hex_escape
  • unicode_escape

🎯 Kit Endpoints

  • https://primeroyaltrustcapital.com/login
  • login

📡 API Calls Detected

  • GET

📊 Desglose de Puntuación de Riesgo

Total Risk Score
95/100

Contributing Factors

Domain Age
Very new domain
Obfuscation
Detected obfuscated JS for data submission
Financial Fraud
Impersonating a bank without regulatory presence

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
Prime Royal Trust Capital users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 136 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Prime Royal Trust Capital
Fake Service
Banking Services

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site mimics a banking portal to prompt users for login credentials via a fake 'E-Banking' login flow.

Secondary Method: Social Engineering

Use of authoritative but fake trust badges to lower user suspicion.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
primeroyaltrustcapital.com
Registered
2026-07-23
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.