Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
No screenshot available
Informações de Detecção
https://aml-exchange365.com/
Detected Brand
AMLBot
Country
International
Confiança
100%
HTTP Status
200
Report ID
fbae6346-345…
Analyzed
2026-01-05 15:19
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T196B2723C310624A77173D9E3B30D3529B2B1B564DBB3F6C8E7E192384AD9CD94B64A18 |
|
CONTENT
ssdeep
|
768:Efxe9P+CIUoFe/13odaW7mn2i5J+xrVQ7bmt:1+UJ+dYOt |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
eded139212ec4c96 |
|
VISUAL
aHash
|
ffd1f1d1ffffe700 |
|
VISUAL
dHash
|
388323b32c274c60 |
|
VISUAL
wHash
|
ffc1c1c1dfff0000 |
|
VISUAL
colorHash
|
060000001c0 |
|
VISUAL
cropResistant
|
28132323b32c274c,070fc9c5d5b589b2,0529968eac940801,40104c6169165454 |
Análise de Código
Risk Score
100/100
Nível de Ameaça
ALTO
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
Telegram Exfiltration
WebSocket C2
🔬 Threat Analysis Report
• Ameaça: Potencial roubo de credenciais ou exfiltração de dados
• Alvo: Usuários do AMLBot
• Método: Provavelmente usa uma interface falsa para coletar informações ou injetar código malicioso
• Exfil: Dados potencialmente enviados para um bot do Telegram (token: 7759703904:AAHhyJL6eWVulMOhjnuNp_OeUtjngapHtew) e outros URLs WebSocket
• Indicadores: JavaScript ofuscado, token de bot do Telegram, URLs WebSocket, detecção de envio de formulário JavaScript, domínio aml-exchange365.com
• Risco: ALTO - Potencial de roubo de dados e comprometimento de contas
🔒 Obfuscation Detected
- atob
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- data:image/png;base64,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
📡 API Calls Detected
- https://ipwhois.app/json/
- https://ip-api.com/json/?fields=countryCode
- https://api.trongrid.io/wallet/broadcasttransaction
- https://min-api.cryptocompare.com/data/pricemulti?fsyms=TRX,USDT&tsyms=USD
- https://ip-api.io/json/
- https://ipapi.co/json/
- https://min-api.cryptocompare.com/data/pricemulti?fsyms=USDT&tsyms=USD
- https://api.ipify.org?format=json
- https://min-api.cryptocompare.com/data/pricemulti?fsyms=TRX&tsyms=USD
- POST
🔑 Telegram Bot Tokens (1)
- 7759703904:AAHh...ngapHtew
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.