SafeMode - Analysis: luqmanlegal.com

Captura Visual

No screenshot available

Información de Detección

http://luqmanlegal.com/said/servicio.html

Detected Brand

Aruba.it

Country

Italy

Confianza

99%

HTTP Status

200

Report ID

cf2cfea9-84a…

Analyzed

2026-01-26 13:58

Final URL (after redirects)

https://luqmanlegal.com/said/servicio.html

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1327196709294743E04D5C3D8B7A17F2A27C28195E742096993EACB2E8FD7E50DC01DE9
CONTENT ssdeep	48:GjPCeNmTNMgEMFIiGy5a9O/qIXmQJIkQSqyBhor9ak1mrQ9GEj3sJRp7ic1dqQr:GjiERlynmQKyzK2usfBqK

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d71a5d2a772a5522
VISUAL aHash	00fffffffffffffe
VISUAL dHash	28004d686810010e
VISUAL wHash	001c2434e7dbf9e0
VISUAL colorHash	07000038040
VISUAL cropResistant	309964694810010e,00000288988c4208

Análisis de Código

Nivel de Amenaza BAJO

🔬 Threat Analysis Report

• Amenaza: No se detectó ninguna amenaza
• Objetivo: No aplicable
• Método: No aplicable
• Exfil: No hay exfiltración de datos
• Indicators: El dominio parece legítimo y coincide con la marca que se muestra en la captura de pantalla.
• Risk: BAJO - Dominio legítimo de Aruba.it

🔐 Credential Harvesting Forms

📤 Form Action Targets

py.html

📊 Desglose de Puntuación de Riesgo

Total Risk Score

0/100

Contributing Factors

Credential Harvesting

Credential harvesting detected with 1 form(s) capturing sensitive data

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Unknown Threat

Objetivo

Aruba.it users (Italy)

Método de Ataque

credential harvesting forms

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

LOW - Automated credential harvesting with HTTP POST to backend

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Aruba.it

Official Website

Unknown

Fake Service

Fraudulent service portal

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

Victim enters credentials into 1 fake form. Form data is captured via JavaScript or backend submission and transmitted to attacker's server for account compromise.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.