Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://arubawebmail771.blob.core.windows.net/user48123184893140019/webm.html
Detected Brand
Aruba
Country
Italy
Confianza
100%
HTTP Status
200
Report ID
aea910be-8be…
Analyzed
2026-01-07 02:10
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C5D1206060684C3791A7CAE877A8731B32C6C21DCF530644A7F9836C1BDBC93FE55A66 |
|
CONTENT
ssdeep
|
96:nrbcR2g9oV/16Q1QhN5Q1b0QGwuxfgsa3pTrXO1EcRZX:rbcR2ZAkJMD |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b031c7cc7ce39338 |
|
VISUAL
aHash
|
ffc7878783ffffff |
|
VISUAL
dHash
|
041e1a1f3b98020c |
|
VISUAL
wHash
|
f1818181016fffe7 |
|
VISUAL
colorHash
|
06000018080 |
|
VISUAL
cropResistant
|
041e1a1f3b98020c,e18491d18db07aed |
Análisis de Código
Risk Score
81/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- fromCharCode
- base64_strings
📤 Form Action Targets
- https://id484912.icu/zbmt.php
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Aruba
https://vvetransferfile72836.blob.core.windows.net/open72821...
Ene 30, 2026
Aruba
https://vvetransferfile72836.blob.core.windows.net/open72821...
Ene 30, 2026
No screenshot
Aruba
https://www.maurobaiardo.it/wsa/zbmt.php
Ene 30, 2026
No screenshot
Aruba
https://agenziaentrate11.blob.core.windows.net/file004857982...
Ene 02, 2026
No screenshot
Aruba
https://wetransfer991.blob.core.windows.net/file480120483912...
Ene 01, 2026
Scan History for arubawebmail771.blob.core.windows.net
Found 1 other scan for this domain
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.