EN ES PT
Back to Stats

Visual Capture

Screenshot of propostacomercial.alwebsites.com.br

Detection Info

https://propostacomercial.alwebsites.com.br/pf/
Detected Brand
PostFinance
Country
Switzerland
Confidence
95%
HTTP Status
200
Report ID
6a36d705-bbf…
Analyzed
2026-01-02 09:26
Final URL (after redirects)
https://propostacomercial.alwebsites.com.br/pf/login.php

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T164310E7041918D3B82D382E5E3B66B1B37D8C764CB8B2B1052ECD3A94FD7E64CD1A0A5
CONTENT ssdeep
24:3C//e6YXmtTdAR847v4q9iMNFfI0E04As4i7CU:uPQEhAPvt9JNFfIb5ATU

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b101868eb339e7ce
VISUAL aHash
7f10404c400018e7
VISUAL dHash
d0a01858180c204c
VISUAL wHash
7f00040c073fcfe7
VISUAL colorHash
07000038000
VISUAL cropResistant
d0a01858180c204c

Code Analysis

Threat Level ALTO
⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing attack
• Target: PostFinance customers
• Method: Fake login page requesting card identification number
• Exfil: Data likely sent to attacker-controlled server (post.php)
• Indicators: Domain mismatch (alwebsites.com.br vs postfinance.ch), form requesting sensitive data.
• Risk: HIGH - Potential for immediate financial information theft.

🔐 Credential Harvesting Forms

📤 Form Action Targets

  • post.php
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.