EN ES PT
Back to Stats

Captura Visual

Screenshot of pessoleldept.com

Informações de Detecção

https://pessoleldept.com/?r=caa84ff1-70c2-4c91-ad39-2fb0a7acf38f&rg=eu
Detected Brand
Microsoft
Country
International
Confidence
100%
HTTP Status
200
Report ID
000df464-690…
Analyzed
2026-02-13 23:41

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T113F1CE31E244C91B7251C9A4F6B1BB9A3B459385D70B0B70F6F0A23ABDC9CB04D942ED
CONTENT ssdeep
96:XNo9+uvTBSTST8FKF1fiPhevO9dShcFSTqM8V8+hucyBF+uuuup:XN6rQeQmfiPovO9dt0z8FvyM

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
dd88333366669999
VISUAL aHash
f0f8f8f0f8f0f0f0
VISUAL dHash
0010302430000000
VISUAL wHash
e0f8f8f0f8e0f0e0
VISUAL colorHash
07000000180
VISUAL cropResistant
0010302430000000

Análise de Código

Risk Score 74/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 Banking

🔬 Threat Analysis Report

• Ameaça: Phishing de credenciais
• Alvo: Usuários do Microsoft
• Método: Imitando uma página de login do Microsoft.
• Exfil: É provável que os dados estejam sendo enviados para um local desconhecido, possivelmente através de Javascript ofuscado.
• Indicadores: Incompatibilidade de domínio, ofuscação Javascript, envio de formulário.
• Risco: ALTO

🔒 Obfuscation Detected

  • fromCharCode
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • https://pessoleldept.com/js/usecure.bundle.js?v=c30c23a9-df52-49a9-a1d4-0790b6de4b9a
  • https://тест
  • https://a#б
  • https://a@b
  • https://a
  • https://a/c%20d?a=1&c=3
  • https://x

📊 Detalhamento da Pontuação de Risco

Total Risk Score
90/100

Contributing Factors

Domain Mismatch
The domain does not match the expected Microsoft domain
Impersonation of Brand
The site mimics a Microsoft login
JavaScript Obfuscation
Obfuscation suggests malicious intent

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Banking Credential Harvester
Alvo
Microsoft users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, Banking
  • 21 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
Microsoft
Official Website
microsoft.com
Fake Service
Microsoft Login

⚔️ Metodologia de Ataque

Primary Method: Credential Phishing

The site attempts to steal Microsoft credentials by presenting a fake login page.

Secondary Method: JavaScript Obfuscation

Obfuscated Javascript is likely used to handle form submission and data exfiltration.

🌐 Indicadores de Compromisso de Infraestrutura

🦠 Malicious Files

Main File
usecure.bundle.js?v=c30c23a9-df52-49a9-a1d4-0790b6de4b9a
File Size

🔬 JavaScript Deep Analysis

Operator Language
English (1%)
Sophistication Level
Basic
Total Code Size
371,8 KB

🔗 API Endpoints Detected

Other
6

🔐 Obfuscation Detected

  • : Heavy

🤖 AI-Extracted Threat Intelligence

🎯 Malicious Files Identified

Main Drainer
usecure.bundle.js?v=c30c23a9-df52-49a9-a1d4-0790b6de4b9a
File Size
371KB
😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.