Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://bus.tkglobalsellerpro.com/
Detected Brand
Unknown
Country
Unknown
Confiança
100%
HTTP Status
200
Report ID
b1ada6b7-eb8…
Analyzed
2026-08-26 11:15
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12A232E8A63381E7CF4470BFCDB4472B7022F63EE75495668792D093C256268DF92BAD0 |
|
CONTENT
ssdeep
|
768:ImKPYnzOQdqsrQFy0bVM/RzRw5CLqCGAQdf6PNtxiZeQ:IFsV8srQFy0bVMplwMLqCGAQdf6PNtxU |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e68c9933cc666699 |
|
VISUAL
aHash
|
ffe7e7e7ffe7e7ff |
|
VISUAL
dHash
|
040c282c024d0c10 |
|
VISUAL
wHash
|
c3c3c3c31b030303 |
|
VISUAL
colorHash
|
07003000180 |
|
VISUAL
cropResistant
|
040c282c024d0c10 |
Análise de Código
Risk Score
73/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔒 Obfuscation Detected
- unescape
🎯 Kit Endpoints
- /login
- data:image/png;base64,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
📡 API Calls Detected
- POST
📊 Detalhamento da Pontuação de Risco
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
Code Obfuscation
JavaScript code obfuscated using 4 technique(s) to evade detection
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
General public
Método de Ataque
obfuscated JavaScript
Canal de Exfiltração
Unknown
Avaliação de Risco
HIGH - Automated credential harvesting with Unknown
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 4 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
Generic Phishing
Official Website
N/A
Fake Service
Banking/payment service
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 4 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
bus.tkglobalsellerpro.com
Registered
2025-07-08 13:34:00+00:00
Registrar
Gname.com Pte. Ltd.
Estado
Active (older domain)
Hosting Information
Provider
Gname.com Pte. Ltd.
ASN
🤖 AI-Extracted Threat Intelligence
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.