Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://mx8.luxegeer.shop/m.html
Detected Brand
Amazon
Country
Unknown
Confiança
100%
HTTP Status
200
Report ID
d2a8ad4b-d62…
Analyzed
2026-05-28 10:13
Final URL (after redirects)
https://mx8.luxegeer.shop/index.html
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18AE4B550E2925C33202F81D6E4A86B1561C2F79BD7410BC2F6F447B45BFBC69B82F689 |
|
CONTENT
ssdeep
|
6144:CUfCYWRwFWy4RyjHFNfzZ6BxCo62HWqnSMlcryHYUwhLDoiega0AbTu0ljUIYAea:COdhAvlYrHrDcfGhDvlTOAtKTIKr |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bb1f4642431f1a1f |
|
VISUAL
aHash
|
00e79fffeffdffe7 |
|
VISUAL
dHash
|
c00f395919191f4f |
|
VISUAL
wHash
|
00818f8dedede5e1 |
|
VISUAL
colorHash
|
07007008000 |
|
VISUAL
cropResistant
|
8282c2d2d2828282,873b395919190f0f,c0c8e8c8c016a622 |
Análise de Código
Risk Score
100/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- document.write
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- /fmc/grocery-gateway?gsc=fe16aGPfFs46S&ref_=nav_cs_groceries
- https://logistics.amazon.com/marketing?utm_source=amzn&utm_medium=footer&utm_campaign=home
- navigate:btf-sub-nav-desktop-customer-reviews
- https://sustainability.aboutamazon.com/?utm_source=gateway&utm_medium=footer&ref_=susty_footer
- /?ref_=footer_logo
- navigate:btf-sub-nav-desktop-back-to-top-image
- navigate:btf-sub-nav-desktop-back-to-top
- /ref=nav_logo
- navigate:btf-sub-nav-desktop-back-to-top-title
- https://www.aboutamazon.com/?utm_source=gateway&utm_medium=footer&token=about
- navigate:btf-sub-nav-desktop-product-info
- https://email.aboutamazon.com/l/637851/2020-10-29/pd87g?utm_source=gateway&utm_medium=amazonfooters&utm_campaign=newslettersubscribers&utm_content=amazonnewssignup
- navigate:btf-sub-nav-desktop-about-this-item
📡 API Calls Detected
- /your-feedback-endpoint
- POST
- /dp/
- GET
📤 Form Action Targets
- /s/ref=nb_sb_noss
- javascript:void(0);
- get
- /gp/product/handle-buy-box/ref=dp_start-bbf_1_glance
📊 Detalhamento da Pontuação de Risco
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
Credential Harvesting
Credential harvesting detected with 9 form(s) capturing sensitive data
Code Obfuscation
JavaScript code obfuscated using 2663 technique(s) to evade detection
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
Amazon users
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
HTTP POST to backend
Avaliação de Risco
CRITICAL - Automated credential harvesting with HTTP POST to backend
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
- 2663 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
Amazon
Official Website
https://www.amazon.com
Fake Service
Banking/payment service
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 2663 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
mx8.luxegeer.shop
Registered
Unknown
Registrar
Unknown
Estado
Age unknown
Hosting Information
Provider
Unknown
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.