SafeMode - Analysis: www.facebooksocialpage.blogspot.com

Captura Visual

Screenshot of www.facebooksocialpage.blogspot.com

Información de Detección

https://www.facebooksocialpage.blogspot.com/

Detected Brand

Facebook

Country

International

Confianza

100%

HTTP Status

200

Report ID

6668906e-f54…

Analyzed

2026-02-23 07:48

Final URL (after redirects)

https://facebooksocialpage.blogspot.com/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T160D1F0B19008A93757A3C3EDF7B1A30BBB82C585C987164A91F6D35D2FD3EA0CC16252
CONTENT ssdeep	96:GgKHUnoGyPs44mGjZzmMK4yYeywq0w2mzClPhUbTuGWVBrGobuicaRO:GgenFbOFPpcTBrls

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	fe7e5ca161616984
VISUAL aHash	809c8080ffffffff
VISUAL dHash	1b38340320202024
VISUAL wHash	80808080c3c3cfc7
VISUAL colorHash	070020001c0
VISUAL cropResistant	1b38340320202024

Análisis de Código

Risk Score 79/100

Nivel de Amenaza MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Impersonación
• Objetivo: Usuarios de Facebook
• Método: Imitación de Facebook, probablemente para robar credenciales o distribuir malware.
• Exfil:  https://facebooksocialpage.blogspot.com/search
• Indicadores: Dominio Blogspot, contenido genérico, falta de marca oficial.
• Riesgo: Moderado

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/feeds/2496958663993205794/posts/default
https://facebooksocialpage.blogspot.com/
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://facebooksocialpage.blogspot.com/feeds/posts/default?alt=rss
https://www.blogger.com/profile/13442599696140667697
https://www.blogger.com
https://facebooksocialpage.blogspot.com/feeds/posts/default
https://facebooksocialpage.blogspot.com/search
https://www.blogger.com/go/report-abuse

📡 API Calls Detected

GET
post

📤 Form Action Targets

https://facebooksocialpage.blogspot.com/search

📊 Desglose de Puntuación de Riesgo

Total Risk Score

65/100

Contributing Factors

Domain Suspicious

Blogspot domain is often associated with malicious or low quality content.

Content Incomplete

Generic message suggests low effort. Likely a work in progress, or phishing attempt

Impersonation

Attempts to mimic Facebook

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Two-Factor Authentication Stealer

Objetivo

Facebook users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Personal Info
12 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Facebook

Official Website

https://www.facebook.com

Fake Service

Facebook

⚔️ Metodología de Ataque

Primary Method: Impersonation

The site attempts to mimic Facebook to deceive users. Its main purpose is to steal information. The low effort suggests it's a preparation for a phishing campaign