EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of jopobu.cc

Informações de Detecção

https://jopobu.cc/bisen/loginer.php
Detected Brand
Binance Pool
Country
International
Confiança
100%
HTTP Status
200
Report ID
bd84b078-e18…
Analyzed
2026-03-04 08:14

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T17282873462D2167F318745B7F321AF55A2A8C64BC72BEA88B3F4C14B73DEC664996340
CONTENT ssdeep
192:OcZh1qLwMTvX7LnfXCk4OUruGAk0Oy0H+HlKsXAbbSz/S9VVP0pIa8DHzpC4:OChqtvX/VVUrvArFXhkVDHV

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b7e2cc1dc01d8dc6
VISUAL aHash
ffe7e7e7e78181ff
VISUAL dHash
4d4d4dcc4d0b0b8c
VISUAL wHash
e7e7e7e7000000ff
VISUAL colorHash
0f000038000
VISUAL cropResistant
4d4d4dcc4d0b0b8c,e8c6a3a9b5b34ea8,a282754d6d6592a2,8e8e8e8e0c0fab9b

Análise de Código

Risk Score 76/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários do Binance Pool
• Método: Coleta de credenciais
• Exfil: Desconhecido (ID e senha)
• Indicadores: Domínio suspeito, solicita credenciais.
• Risco: Alto

🔒 Obfuscation Detected

  • fromCharCode
  • unicode_escape

📊 Detalhamento da Pontuação de Risco

Total Risk Score
90/100

Contributing Factors

Suspicious Domain
Domain age is new and unrelated to Binance Pool.
Credential Harvesting
The site asks for sensitive information (ID, Password reset).
Obfuscation
Obfuscation detected in javascript.

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Banking Credential Harvester
Alvo
Binance Pool users (International)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 6 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
Binance Pool
Fake Service
Binance Pool Login

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The attacker attempts to steal user credentials by mimicking a login page and prompting the user to enter their ID and set a new password.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
jopobu.cc
Registered
None
Registrar
None
Estado
None

🤖 AI-Extracted Threat Intelligence

Scan History for jopobu.cc

Found 3 other scans for this domain

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.