SafeMode - Analysis: secret-flirts.com

Captura Visual

Información de Detección

https://secret-flirts.com/fe921lry.php?key=m5r9i6hr49er9li7ewqr&tag=ordbVHPNXHNPLHNM7bc7qa6pqqbXW1Wzz1y0uldRLKqeqV1Utrqp3TupldK6V0rqZa667q6XT3VUU2zOnttqpltdK6Z0rpXSumdM6V0rpXOdK7rYQSACWNSlOcLoWVEc0rp5XSuldK6V0rpXSuldNZVdLLZTPc5zpXSuldK6V0rpXSuldK6Z0rpXFWDbvXM3YQRZ7afB19j3UHX7vX2PUP7nOd1sIJABLGpSna20U0XUWW7XT3VT10cS6a6TzS3S0bXV2uD7&t1=hdpornos.xxx&t2=85822604&t3=713732&t4=953792&t5=4651548

Detected Brand

eBay

Country

International

Confianza

95%

HTTP Status

200

Report ID

fd71099f-42e…

Analyzed

2026-03-01 15:55

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1BAE1BB318482856B00D352E456739B9BB3A09351EA578E251BF4C3FE4FDAF68CF0B562
CONTENT ssdeep	48:PzIkvFKY9zvlwJd7gKeLWkhuaPo3xI0G9cbZjG9EwBmFideG9czyYhBSHbycUiGb:PFDJw7SHQPqmsczSFEa69O4k04iK5o

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	e66699b1a298b333
VISUAL aHash	e70000e7e7e7ffff
VISUAL dHash	0c210c0c0f0c0008
VISUAL wHash	e700e3e3c0fcf0f0
VISUAL colorHash	07200038040
VISUAL cropResistant	0c210c0c0f0c0008

Análisis de Código

Risk Score 53/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: usuarios de eBay
• Método: Suplantación con contenido sexualmente sugestivo.
• Exfil: Desconocido (probablemente redirige a un sitio o campaña maliciosa).
• Indicadores: Coincidencia de dominio, contenido explícito, suplantación de marca.
• Riesgo: Alto

🔒 Obfuscation Detected

fromCharCode

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Domain Mismatch

The domain is completely unrelated to eBay

Content Irrelevance and NSFW

The image and text content has nothing to do with eBay and is sexually suggestive, indicating a malicious intent.

Brand Impersonation

Logo of eBay used to attempt to build trust

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Credential Harvesting Kit

Objetivo

eBay users (International)

Método de Ataque

Brand impersonation + obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

eBay

Official Website

ebay.com

Fake Service

Classifieds

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Brand Impersonation

The attacker uses the eBay logo and branding to trick users into believing the site is legitimate. The use of sexual content distracts users from the phishing aspect of the site.