SafeMode - Analysis: csv1v04.na1.hubspotlinks.com

Captura Visual

Screenshot of csv1v04.na1.hubspotlinks.com

Informações de Detecção

https://csv1v04.na1.hubspotlinks.com/Ctc/T7+113/csv1v04/VWs8dL7410FGW2Ljc5k52BwPkW7Y8zfc4P-Y_mN3wqV773lSbNV1-WJV7CgJqzW1819-_9dj_jBW4mVmCZ75MY1KVc3Ng28kCF76W8g3ZM218Dwf5VL-skD76b3TfW6gY86L6RK1Q1W244ydC2qfL2WW2hPvMv7yT8mtW1kyYY89kDp5rW3ZtMfW5DtTwDW4WBYmD3jVZ_pW9h4xSd7sPt0KW1lQrTk5vfnYNW4981cx5YGnskW6x-QhF6vBqQwW6VQcB98DK2kzVdC8zy4J4xNSV4Lxzr1QRDy5W65_nzZ2n5nLbW4hHwsm57zGrlW8cTpxD1-D3cXW6FhB2X2FBRHF35fP1

Detected Brand

Facebook

Country

International

Confiança

100%

HTTP Status

200

Report ID

5d40a62d-184…

Analyzed

2025-12-27 06:43

Final URL (after redirects)

https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2F105498231228227%3Futm_medium%3Demail%26_hsenc%3Dp2ANqtz-_tsLnWx6-ITtSDl-sEUXJT-TP8TGlUak_DCMMnoH4YhdeO33B_YJlWIGM48OzpXTMNC8oVW7W3WVkkEcdaK9te-wl5YaWkW9e0FVcCaET88eJXT-M%26_hsmi%3D226169691%26utm_content%3D226169691%26utm_source%3Dhs_email

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T12C23D8259209B0620B7A4FF4E87D021712D7595FF8B2A0A09D2AF7E634D3FF5AD5E008
CONTENT ssdeep	1536:pPt813ZEMRxJ018rBWakFjFHqqZjispgNmzUmKE+GnIWnIjiD99jifIAaiqgcukg:fFHqqZjispgNmzUmKE+GnIWnIjiD99jE

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b372ce8158ce8cbc
VISUAL aHash	efe7c7c4476fffff
VISUAL dHash	8c0f9d099dd9ce36
VISUAL wHash	67c7c0c0454f6fc3

Análise de Código

Risk Score 70/100

Nível de Ameaça CRITICAL

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing para roubo de credenciais direcionado a usuários do Facebook
• Alvo: Usuários do Facebook
• Método: Formulário falso de login do Facebook para roubar credenciais de login
• Exfil: Desconhecido (provavelmente para um servidor malicioso)
• Indicadores: Domínio não relacionado (csv1v04.na1.hubspotlinks.com), personificação de marca
• Risco: ALTO - Risco imediato de roubo de credenciais