Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
No screenshot available
Informações de Detecção
https://instantevistaai.net/
Detected Brand
Unknown
Country
International
Confiança
100%
HTTP Status
200
Report ID
89de3d0b-caf…
Analyzed
2026-02-23 15:45
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T182A3EE234259752A4077C3D430BA1F3BD1AA994BFAE709414EDCC7F62BFAC50702B699 |
|
CONTENT
ssdeep
|
768:YNw9tMbXReQ/GJi55RPGOrb8o7mJ/ee0Vqcnn:v9tMbXlOJi55R+Ov8o7mJX0Vqcnn |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9612ed690d6f1693 |
|
VISUAL
aHash
|
00040e060600ffff |
|
VISUAL
dHash
|
d77cecccbc0c0326 |
|
VISUAL
wHash
|
000e0e0e0e8effff |
|
VISUAL
colorHash
|
02003400400 |
|
VISUAL
cropResistant
|
bc6cecccbc0c0026,dcbd6cececccac7c,1c07432513161c3c |
Análise de Código
Risk Score
73/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Ameaça: Phishing
• Alvo: Indivíduos
• Método: Formulários para roubar dados
• Exfil: Desconhecido
• Indicadores: Domínio novo, Solicitação de dados, Marca não clara
• Risco: ALTO
🔒 Obfuscation Detected
- unicode_escape
📡 API Calls Detected
- ./form/handle_form.php
- https://amos-mamaya.fun/geo
📊 Detalhamento da Pontuação de Risco
Total Risk Score
90/100
Contributing Factors
Recent Domain
The domain is very recent.
Requests Personal Info
Requests Personally Identifiable Information
No Clear Brand Identity
No established brand or reputation.
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
General public
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: OTP Stealer, Banking, Personal Info
- 31 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
Unknown
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
The site uses a form to collect personal information from users under the guise of an account sign-up.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
instantevistaai.net
Registered
2024-02-12
Registrar
Unknown
Estado
Active
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.