SafeMode - Analysis: telstra23.blogspot.com

Captura Visual

Información de Detección

https://telstra23.blogspot.com

Detected Brand

Telstra

Country

Australia

Confianza

100%

HTTP Status

200

Report ID

f158db6a-115…

Analyzed

2026-03-02 07:27

Final URL (after redirects)

https://telstra23.blogspot.com/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C54251A1A644AA3B1263D7D9B3B3B74BFA828085C8C2004AD5F5E35D1FE3D71EC1A315
CONTENT ssdeep	96:DcTSJZ4Z52HUnoGyPs44mGjZzm/MK4yYeyBqEE8q5AbDowGgjdpoksSuh9CaVZ/r:wTmnFbOfQ3wtpEE8epC5cTBrd0

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	fe5e6161616c1e94
VISUAL aHash	80809c80ffffffff
VISUAL dHash	2b38303003202024
VISUAL wHash	80809c80f0f0f0f0
VISUAL colorHash	070020001c0
VISUAL cropResistant	2b38303003202024

Análisis de Código

Risk Score 74/100

Nivel de Amenaza MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Suplantación de identidad
• Objetivo: Clientes de Telstra
• Método: Blogspot se usa para redirección potencial o contenido malicioso.
• Exfil: Probable redirección a otro sitio desconocido (no visible).
• Indicadores: Blogspot, dominio que no coincide, contenido mínimo, ofuscación.
• Riesgo: Moderado

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/go/report-abuse
https://telstra23.blogspot.com/feeds/posts/default?alt=rss
https://telstra23.blogspot.com/2022/10/redirection_21.html
https://www.blogger.com
https://www.blogger.com/feeds/5506792530149997013/posts/default
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=
https://telstra23.blogspot.com/2023/04/
https://telstra23.blogspot.com/2022/10/redirection_21.html#comments
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=pinterest
https://telstra23.blogspot.com/
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=facebook
https://telstra23.blogspot.com/feeds/posts/default
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=twitter
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=email
https://telstra23.blogspot.com/search
https://www.blogger.com/profile/10361119388413162869

📡 API Calls Detected

GET
post

📤 Form Action Targets

https://telstra23.blogspot.com/search

📊 Desglose de Puntuación de Riesgo

Total Risk Score

65/100

Contributing Factors

Domain Mismatch

Domain does not match the official brand domain.

Blogspot Hosting

Blogspot often used for phishing.

Obfuscation Detected

Suspicious javascript code obfuscation

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Credential Harvesting Kit

Objetivo

Telstra users (Australia)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

HTTP POST to backend

Evaluación de Riesgo

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Personal Info
11 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Telstra

Official Website

https://www.telstra.com.au/

Fake Service

Unspecified

⚔️ Metodología de Ataque

Primary Method: Impersonation

The attacker attempts to impersonate Telstra by using a similar name and logo to trick users into clicking on malicious links or entering credentials.