EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of im.nbpublic.com

Informações de Detecção

http://im.nbpublic.com/loading_page/snack_box/snack_box_cf_3
Detected Brand
Amazon
Country
USA
Confidence
95%
HTTP Status
200
Report ID
2c5a2dde-910…
Analyzed
2026-03-16 23:51
Final URL (after redirects)
http://im.nbpublic.com/loading_page/snack_box/snack_box_cf_3/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T176618A715449D8BF82C3C2E086783B5E36C1CA86EE2B1A9886F4D30D1FEBD90ED07155
CONTENT ssdeep
48:llMLEY0OW2IbSAwwy6qj4OQHj4OQgj4OQtj4OQ8pt8BjH5c7BjHY3BjHM/9MBjH3:LTaw9ycAzuozscqK0

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
e666c666cccc9833
VISUAL aHash
e7e7e7e7e7e7ffff
VISUAL dHash
2d4d0f0d4d0d0008
VISUAL wHash
27278080a581ffff
VISUAL colorHash
07400018000
VISUAL cropResistant
2d4d0f0d4d0d0008

Análise de Código

Risk Score 3/100
Threat Level ALTO
⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Clientes da Amazon
• Método: Incentivo de presente para obter informações do usuário
• Exfil: Desconhecido (é provável que os cliques do usuário levem à coleta de dados)
• Indicadores: Oferta de presente, marca Amazon, pesquisa curta
• Risco: Alto

🔒 Obfuscation Detected

  • unescape

📡 API Calls Detected

  • POST

📊 Detalhamento da Pontuação de Risco

Total Risk Score
90/100

Contributing Factors

Mismatched Domain
The domain is not related to Amazon.
Impersonation of Brand
The website attempts to impersonate Amazon with branding and a gift offer.
Suspicious Content
The offering of 'mystery gifts' and a test for a prize is a red flag.

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Amazon Phishing Landing Page
Alvo
Amazon users (USA)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • 2 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
Amazon
Official Website
https://www.amazon.com
Fake Service
Gift offers or surveys

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Brand Impersonation

The attacker uses the Amazon brand to lure victims. The site creates an initial hook with a welcoming message and a simple prompt to engage.

Secondary Method: Social Engineering

The attacker uses an incentive, a prize or gift, to entice the user to interact with the page.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domain
im.nbpublic.com
Registered
2022-09-14
Registrar
Namecheap
Status
ACTIVE

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Amazon
https://im.nbpublic.com/loading_page/amazon/AmazonGiftCard_5...
Mar 07, 2026
 Screenshot
Amazon
https://im.nbpublic.com/loading_page/snack_box/snack_box_cf_...
Dez 31, 2025
 Screenshot
Amazon
http://im.nbpublic.com/loading_page/snack_box/snack_box_cf_3...
Dez 31, 2025
No screenshot
Amazon
http://im.nbpublic.com/loading_page/snack_box/snack_box_cf_3
Dez 22, 2025

Scan History for im.nbpublic.com

Found 10 other scans for this domain

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.