Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
http://worldqbmm.top
Detected Brand
WorldCoin
Country
Unknown
Confidence
100%
HTTP Status
200
Report ID
0c761d1c-61f…
Analyzed
2026-04-07 06:27
Final URL (after redirects)
http://worldqbmm.top/
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11F33AA3972433A16597BC8D1F4A05F1A3026AF37DB2C0F34A3E526656BDACF06816B74 |
|
CONTENT
ssdeep
|
192:U0nUbDgSqBMeeDRmr2dlkqRI8Yry8yjrJkKbXsthGOnxAHv7AzHv7OIO5Hv7k/HS:pn2NtYLcTTsf2q6VPyCtTzhBeC3D |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
88a8b3f3d6d499a2 |
|
VISUAL
aHash
|
ff01191818180018 |
|
VISUAL
dHash
|
b033b3b232321432 |
|
VISUAL
wHash
|
ff3b1b1b18181819 |
|
VISUAL
colorHash
|
30000030040 |
|
VISUAL
cropResistant
|
b033b3b232321432 |
Análise de Código
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- atob
- fromCharCode
- unescape
- document.write
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- data:image/png;base64,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
📡 API Calls Detected
- account
- GET
- proxy
- 0x3b3b57de
- stats
- POST
- logs
📊 Detalhamento da Pontuação de Risco
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
Code Obfuscation
JavaScript code obfuscated using 2073 technique(s) to evade detection
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
WorldCoin users
Método de Ataque
obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
- 2073 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
WorldCoin
Official Website
N/A
Fake Service
Banking/payment service
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 2073 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domain
worldqbmm.top
Registered
2026-04-01 08:29:29+00:00
Registrar
Gname.com Pte. Ltd.
Status
Recently registered (5 days old)
Hosting Information
Provider
Gname.com Pte. Ltd.
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.