EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

No screenshot available

Información de Detección

https://aml-exchange365.com/
Detected Brand
AMLBot
Country
International
Confianza
100%
HTTP Status
200
Report ID
fbae6346-345…
Analyzed
2026-01-05 15:19

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T196B2723C310624A77173D9E3B30D3529B2B1B564DBB3F6C8E7E192384AD9CD94B64A18
CONTENT ssdeep
768:Efxe9P+CIUoFe/13odaW7mn2i5J+xrVQ7bmt:1+UJ+dYOt

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
eded139212ec4c96
VISUAL aHash
ffd1f1d1ffffe700
VISUAL dHash
388323b32c274c60
VISUAL wHash
ffc1c1c1dfff0000
VISUAL colorHash
060000001c0
VISUAL cropResistant
28132323b32c274c,070fc9c5d5b589b2,0529968eac940801,40104c6169165454

Análisis de Código

Risk Score 100/100
Nivel de Amenaza ALTO
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
Telegram Exfiltration WebSocket C2

🔬 Threat Analysis Report

• Amenaza: Potencial robo de credenciales o exfiltración de datos
• Objetivo: Usuarios de AMLBot
• Método: Probablemente utilice una interfaz falsa para recopilar información o inyectar código malicioso
• Exfil: Datos potencialmente enviados a un bot de Telegram (token: 7759703904:AAHhyJL6eWVulMOhjnuNp_OeUtjngapHtew) y otras URL de WebSocket
• Indicadores: JavaScript ofuscado, token de bot de Telegram, URL de WebSocket, detección de envío de formulario JavaScript, dominio aml-exchange365.com
• Riesgo: ALTO - Potencial de robo de datos y compromiso de cuentas

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • data:image/png;base64,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

📡 API Calls Detected

  • https://ipwhois.app/json/
  • https://ip-api.com/json/?fields=countryCode
  • https://api.trongrid.io/wallet/broadcasttransaction
  • https://min-api.cryptocompare.com/data/pricemulti?fsyms=TRX,USDT&tsyms=USD
  • https://ip-api.io/json/
  • https://ipapi.co/json/
  • https://min-api.cryptocompare.com/data/pricemulti?fsyms=USDT&tsyms=USD
  • https://api.ipify.org?format=json
  • https://min-api.cryptocompare.com/data/pricemulti?fsyms=TRX&tsyms=USD
  • POST

🔑 Telegram Bot Tokens (1)

  • 7759703904:AAHh...ngapHtew

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
AMLBot
https://falas.pages.dev/
Jul 05, 2026
 Screenshot
AMLBot
https://trontest1.pages.dev/
Abr 11, 2026
😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.