SafeMode - Analysis: telstra23.blogspot.in

Captura Visual

Información de Detección

https://telstra23.blogspot.in

Detected Brand

Telstra

Country

Australia

Confianza

100%

HTTP Status

200

Report ID

d3dcfc54-7e0…

Analyzed

2026-03-02 07:28

Final URL (after redirects)

https://telstra23.blogspot.com/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C54251A1A644AA3B1263D7D9B3B3B74BFA828085C8C2004AD5F5E35D1FE3D71EC1A315
CONTENT ssdeep	96:DcTSJZ4Z52HUnoGyPs44mGjZzm/MK4yYeyBqEE8q5AbDowGgjdpoksSuh9CaVZ/r:wTmnFbOfQ3wtpEE8epC5cTBrd0

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	fe5e6161616c1e94
VISUAL aHash	80809c80ffffffff
VISUAL dHash	2b38303003202024
VISUAL wHash	80809c80f0f0f0f0
VISUAL colorHash	070020001c0
VISUAL cropResistant	2b38303003202024

Análisis de Código

Risk Score 74/100

Nivel de Amenaza MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Suplantación
• Objetivo: Clientes de Telstra
• Método: Alojamiento en Blogspot y redirección
• Exfil: Potencialmente datos de clientes de Telstra
• Indicadores: Dominio Blogspot, sin marca legítima, redirecciona
• Riesgo: Moderado

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/go/report-abuse
https://telstra23.blogspot.com/feeds/posts/default?alt=rss
https://telstra23.blogspot.com/2022/10/redirection_21.html
https://www.blogger.com
https://www.blogger.com/feeds/5506792530149997013/posts/default
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=
https://telstra23.blogspot.com/2023/04/
https://telstra23.blogspot.com/2022/10/redirection_21.html#comments
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=pinterest
https://telstra23.blogspot.com/
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=facebook
https://telstra23.blogspot.com/feeds/posts/default
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=twitter
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=email
https://telstra23.blogspot.com/search
https://www.blogger.com/profile/10361119388413162869

📡 API Calls Detected

GET
post

📤 Form Action Targets

https://telstra23.blogspot.com/search

📊 Desglose de Puntuación de Riesgo

Total Risk Score

75/100

Contributing Factors

Suspicious Domain

Uses a domain that is not a primary Telstra domain and hosted on blogspot.

Poorly Designed Website

Generic layout and lack of brand-specific design elements. Also, the redirection.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Credential Harvesting Kit

Objetivo

Telstra users (Australia)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Personal Info
11 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Telstra

Official Website

https://www.telstra.com.au/

Fake Service

Potential redirection for credential harvesting. Might be tricking to enter login credentials or download malware

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site likely redirects users to a phishing page designed to steal credentials by mimicking the Telstra login page. The attacker relies on users trusting the Telstra name in the URL.