SafeMode - Analysis: bnpparibas.mitarbeitervorteile.de

Captura Visual

No screenshot available

Informações de Detecção

http://bnpparibas.mitarbeitervorteile.de

Detected Brand

BNP Paribas

Country

International

Confiança

100%

HTTP Status

200

Report ID

348567c0-88d…

Analyzed

2025-12-21 06:00

Final URL (after redirects)

https://bnpparibas.mitarbeitervorteile.de/login-input.action

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1D752C97251C1793B474381C291237B5EF2C2C128DB921850EAF887EA9BDECF1D969227
CONTENT ssdeep	384:+9tiaFsfsvCI5CPnYAfNBTxsJEJuvSf6F93L8k:+HiaFsfsKI52YOxsqGF93L8k

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a887359bd3b1c730
VISUAL aHash	2f9377ffff3d0000
VISUAL dHash	dd26e6f9e9611f1f
VISUAL wHash	0f0377ffff3c0000
VISUAL colorHash	07c00000000
VISUAL cropResistant	dd36e6f9b961399f,9733397c7e7efebe,693f9f9f1f1fc934

Análise de Código

Risk Score 100/100

Nível de Ameaça ALTO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing attack
• Target: BNP Paribas employees
• Method: Fake login page to steal employee credentials
• Exfil: Likely to a malicious server
• Indicators: Domain mismatch (bnpparibas.mitarbeitervorteile.de vs bnp.paribas), login form, cookie prompt overlay
• Risk: HIGH - Real-time credential theft.

🔐 Credential Harvesting Forms

🎯 Kit Endpoints

https://bnpparibas.mitarbeitervorteile.de/switch-locale.action?locale=de&ref=https%3A%2F%2Fbnpparibas.mitarbeitervorteile.de%2Flogin-input.action
https://bnpparibas.mitarbeitervorteile.de/login-input.action
https://google.com/recaptcha/admin/migrate
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclSy8pAAAAAGUfvc_vYSfxLGaz2uiQf3GgDGRh&co=aHR0cHM6Ly9ibnBwYXJpYmFzLm1pdGFyYmVpdGVydm9ydGVpbGUuZGU6NDQz&hl=en&v=7gg7H51Q-naNfhmCP3_R47ho&size=invisible&sa=login&anchor-ms=20000&execute-ms=30000&cb=udv53d3fem1y
login
login.action
https://bnpparibas.mitarbeitervorteile.de/switch-locale.action?locale=en&ref=https%3A%2F%2Fbnpparibas.mitarbeitervorteile.de%2Flogin-input.action