SafeMode - Analysis: www.tinu.be

EN ES PT

Back to Stats

Captura Visual

Screenshot of www.tinu.be

Informações de Detecção

http://www.tinu.be/5XZCs7lIX/

Detected Brand

Unknown

Country

Unknown

Confidence

100%

HTTP Status

200

Report ID

d42ab7a3-156…

Analyzed

2026-02-04 23:56

Final URL (after redirects)

https://tinu.be/en/blocked?url=5XZCs7lIX

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1AEA33BF83609B66A05A3439750EF24077369121BB40E0C60B359FD9EB6E9C97A07BFD4
CONTENT ssdeep	1536:v3VcP03olUuRNka2wblHbJLwLIz9GguGOjjRnY:fVFkrX2wd9W/guGO+

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	be6398cc4b6a384b
VISUAL aHash	01240000e7dfffdf
VISUAL dHash	698c4c4c28302131
VISUAL wHash	00000202ffdfffdf
VISUAL colorHash	071c0000000
VISUAL cropResistant	698c4c4c28302131

Análise de Código

Risk Score 100/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

atob
fromCharCode
unicode_escape
base64_strings

🎯 Kit Endpoints

/auth/login

📡 API Calls Detected

POST
https://www.google.com/ccm/geo
GET
/api/session

📊 Detalhamento da Pontuação de Risco

Total Risk Score

100/100

Contributing Factors

Active Phishing Kit

Detected kit types: Credential Harvester, OTP Stealer, Banking, Personal Info

Code Obfuscation

JavaScript code obfuscated using 76 technique(s) to evade detection

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

General public

Método de Ataque

obfuscated JavaScript

Canal de Exfiltração

Unknown

Avaliação de Risco

CRITICAL - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
76 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Generic Phishing

Official Website

N/A

Fake Service

Banking/payment service

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 76 techniques to evade detection by security scanners and make reverse engineering more difficult.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domain

www.tinu.be

Registered

2018-10-18 00:00:00+00:00

Registrar

Unknown

Status

Active (older domain)

Hosting Information

Provider

Unknown

ASN

🔬 JavaScript Deep Analysis

Operator Language

English (1%)

Total Code Size

717,6 KB

🔗 API Endpoints Detected

Other

5

🔐 Obfuscation Detected

: Heavy
: Light
: None
: Light
: Light
: Light
: None
: Light
: Light
: Light
: Light
: Light
: Light
: Light
: None
: Light
: Moderate
: Light
: Light
: Light

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot

https://cdn.gosafemode.com/screenshots/39a00c14c86c.png

Screenshot

https://cdn.gosafemode.com/screenshots/a78a5df21e39.png

Screenshot

https://cdn.gosafemode.com/screenshots/dc6f0ced388c.png

Screenshot

http://www.tinu.be/code

https://tinu.be/fEk34g4ky

Scan History for www.tinu.be

Found 1 other scan for this domain

http://www.tinu.be/code ? Mar 16, 2026 19:39

😰

"Nunca pensei que aconteceria comigo"

Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.