EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of oasismarketpro.com

Información de Detección

https://oasismarketpro.com/
Detected Brand
Oasis MarketPro
Country
International
Confianza
100%
HTTP Status
200
Report ID
f2892f01-353…
Analyzed
2026-08-09 11:26

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T16774E9F0AF48BD4F145742F2F65EF38D52251210FA89D5682E6CA95013EBCE29637BE0
CONTENT ssdeep
1536:DYRWazaTmmmmxmmmUzmmmmsmmmmxmmmUzmmmmsmmmmxmmmUzmmmmSsmmmmXmmmmn:D533H3W3UJhvNnW580a+XW

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
cce732348d8c96b3
VISUAL aHash
02003c3c3c181000
VISUAL dHash
d69769707130300c
VISUAL wHash
62e0fc3c3c3c1e0f
VISUAL colorHash
38009040080
VISUAL cropResistant
d69769707130300c

Análisis de Código

Risk Score 79/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Phishing Financiero / Robo de credenciales
• Objetivo: Usuarios de plataformas de trading
• Método: Suplantación de un sitio de trading con scripts de envío ofuscados
• Exfil: Recopilación de formularios basada en JavaScript
• Indicadores: JS ofuscado, plantilla de trading
• Riesgo: Alto

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unicode_escape

🎯 Kit Endpoints

  • /login

📡 API Calls Detected

  • /api/auth/register
  • /api/settings
  • GET
  • /api/auth/2fa

📊 Desglose de Puntuación de Riesgo

Total Risk Score
88/100

Contributing Factors

Obfuscated Code
Detection of atob/fromCharCode in scripts indicates intent to hide data exfiltration.
Financial Theme
Trading-themed site without verifiable corporate registration.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
Oasis MarketPro users (International)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 10 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Oasis MarketPro
Fake Service
Digital Trading Platform

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site uses a landing page to capture user registration details for a fake trading account.

Secondary Method: Data Exfiltration

Obfuscated JavaScript is likely used to send input field data to a remote attacker-controlled server.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
oasismarketpro.com
Registered
2026-06-02
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.