EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of kmyf-web-whatsapp.hk.cn

Informações de Detecção

http://kmyf-web-whatsapp.hk.cn/
Detected Brand
WhatsApp
Country
Unknown
Confiança
100%
HTTP Status
200
Report ID
b1f9d9bb-078…
Analyzed
2026-06-20 22:14

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1DA22B5359002ED3B1583C3C177A2536BB6DCC756CC931E6A22F5470D4FC6EAAEC9225A
CONTENT ssdeep
192:h3+a79g74wF7tiPlhSckWhKcEh0cHIMU0yiJhZiDTnNRf+cxTHm2JSW1Z:h39ZgEwFoPqckNcRcHIMUShcDTnNJJTz

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
f3e38c4ccc984b99
VISUAL aHash
ffe7efff0000ffff
VISUAL dHash
2b4c4a0c44d03426
VISUAL wHash
f9e6e6800000dfff
VISUAL colorHash
060000001c0
VISUAL cropResistant
234c4c4c480e0c54,c030342000343616,0002d4d454dc2200

Análise de Código

Risk Score 3/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed

🔒 Obfuscation Detected

  • unescape

📡 API Calls Detected

  • POST

📊 Detalhamento da Pontuação de Risco

Total Risk Score
40/100

Contributing Factors

Code Obfuscation
JavaScript code obfuscated using 2 technique(s) to evade detection

🔬 Análise Integral de Ameaças

Tipo de Ameaça
WhatsApp Phishing Landing Page
Alvo
WhatsApp users
Método de Ataque
obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • 2 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
WhatsApp
Official Website
https://www.whatsapp.com
Fake Service
Credential harvesting service

⚔️ Metodologia de Ataque

Primary Method: Search Engine Manipulation

Fake WhatsApp site positioned to capture victims through SEO tactics, typosquatting, or paid advertising. Serves as entry point for multi-stage attacks including credential theft and malware distribution.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
kmyf-web-whatsapp.hk.cn
Registered
2026-06-20 21:15:29+00:00
Registrar
万商云集（成都）科技股份有限公司
Estado
Age unknown

Hosting Information

Provider
万商云集（成都）科技股份有限公司
ASN

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.