SafeMode - Analysis: alisteronlinebanking.com

Captura Visual

No screenshot available

Informações de Detecção

https://alisteronlinebanking.com/

Detected Brand

Unknown

Country

International

Confiança

100%

HTTP Status

200

Report ID

796b9f29-89e…

Analyzed

2026-02-27 18:00

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F463353C63C1563550C783B2E594AF69D29CCF9ADB27AD8BF2ACC247178AC45CF52260
CONTENT ssdeep	768:P5CFfvqJ5kbfXHwo4xBg28Lavx1v3PZSGEWbjRBTeRCa:SfCJtTx1v3PPEWbM

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a9abd0bac0ead2d2
VISUAL aHash	ff0b0b2303030100
VISUAL dHash	dbd7d3d3d7d79390
VISUAL wHash	ff0b1b7b1303035a
VISUAL colorHash	07600008040
VISUAL cropResistant	4bdff3d3d3d7d7b3,2040838b73a36393,dfd3d3d3d7d39a90

Análise de Código

Risk Score 82/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários bancários
• Método: Personificação
• Exfil: Desconhecido, provavelmente para roubar credenciais e informações financeiras. A ofuscação sugere uma tentativa de ocultar a exfiltração de dados.
• Indicadores: Incompatibilidade de domínio, ofuscação de Javascript.
• Risco: ALTO

🔒 Obfuscation Detected

fromCharCode
hex_escape
unicode_escape
base64_strings

🎯 Kit Endpoints

https://alisteronlinebanking.com/login
https://alisteronlinebanking.com/verify
https://alisteronlinebanking.com/send-money

📡 API Calls Detected

https://libretranslate.com/translate
GET

📊 Detalhamento da Pontuação de Risco

Total Risk Score

95/100

Contributing Factors

Domain mismatch

The domain is not affiliated with a known bank.

JavaScript obfuscation

Obfuscation techniques are often used to hide malicious code from detection.

Form submission detected

Form submission and javascript obfuscation strongly indicates that data is being sent to external source

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

General public

Método de Ataque

obfuscated JavaScript

Canal de Exfiltração

Unknown

Avaliação de Risco

CRITICAL - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
49 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Alister Bank

Fake Service

Online Banking

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The site likely attempts to harvest login credentials. The user is prompted to 'Login to Banking' or 'Open Account Today', and these links likely lead to forms. Obfuscated javascript often accompanies these form submissions to exfiltrate user's information.