EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of tr.casibomsxgir.co

Informações de Detecção

https://tr.casibomsxgir.co/
Detected Brand
Casibom
Country
Unknown
Confiança
95%
HTTP Status
200
Report ID
d8c9463e-3a0…
Analyzed
2026-06-21 05:24

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1F5A254327040A83F47A783CD596A732FA1D29399DA2315116BFD87EE4FC2DE1DC62609
CONTENT ssdeep
384:Y0Ag37oOC36MQc0oJCYas0oICX5m5MBetzcn7pqJMudzIy:uIoBMzgSMgzIy

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c3c73c3887c3c33c
VISUAL aHash
4000647677606000
VISUAL dHash
cc52ccccc4c4ca80
VISUAL wHash
646074777ff6e040
VISUAL colorHash
38000000418
VISUAL cropResistant
cc52ccccc4c4ca80

Análise de Código

Risk Score 6/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed

🔒 Obfuscation Detected

  • fromCharCode
  • unescape

📡 API Calls Detected

  • POST

📊 Detalhamento da Pontuação de Risco

Total Risk Score
40/100

Contributing Factors

Code Obfuscation
JavaScript code obfuscated using 3 technique(s) to evade detection

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Casibom Phishing Landing Page
Alvo
Casibom users
Método de Ataque
obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • 3 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
Casibom
Official Website
N/A
Fake Service
Credential harvesting service

⚔️ Metodologia de Ataque

Primary Method: Brand Impersonation Redirect

Impersonates Casibom to build victim trust through search engine manipulation or malicious advertisements. Often redirects to credential theft pages or serves malware disguised as legitimate software.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 3 techniques to evade detection by security scanners and make reverse engineering more difficult.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
tr.casibomsxgir.co
Registered
2026-06-21 05:44:10+00:00
Registrar
Dynadot Inc
Estado
Age unknown

Hosting Information

Provider
Dynadot Inc
ASN

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.