Phishing Analysis: Unknown

Captura Visual

No screenshot available

Informações de Detecção

https://tiktok.1d2by.com/start/

Detected Brand

Unknown

Country

Unknown

Confidence

100%

HTTP Status

200

Report ID

714133e0-1f9…

Analyzed

2026-01-28 23:49

Final URL (after redirects)

https://tiktok.1d2by.com/start/#/index

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T10F834070C695613B06234ED9B5716F0BB2D3930ECE67890467FC478EABEBCD5EA01486
CONTENT ssdeep	1536:2W4A0LAxa2ay1apJGDfLTlzHWOCFkmiQ2oOh14FDB92:21h592

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	eaa195ac66f5491a
VISUAL aHash	f7ff01010171ff00
VISUAL dHash	882943a7a5c3252d
VISUAL wHash	e5ffc14101f1ff00
VISUAL colorHash	03000030000
VISUAL cropResistant	093943a7a5c12535,0000009393820080,6a6a723731113434,6759a4d494962153,3535253d3db9edec

Análise de Código

Risk Score 100/100

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

atob
fromCharCode
unescape
document.write
unicode_escape
base64_strings

📡 API Calls Detected

/api/category!tree.action
post
/api/credit!pay.action
/api/activity/lottery!getCurrentActivity.action
/public/userOnlineChatController!unread.action
/api/credit!beforereapply.action
/api/localuser!registerNoVerifcode.action
api/syspara!getSyspara.action
/api/credit!histroy.action
/api/category!sellerTree.action
/api/jscode!execute.action
/api/credit!apply.action
/api/credit!beforepay.action
/api/credit!config.action
/api/localuser!registerWithVerifcode.action
/api/credit!check.action
GET
/api/localuser!get.action
/api/credit!bill.action
api/newOnlinechat!unread.action

📊 Detalhamento da Pontuação de Risco

Total Risk Score

100/100

Contributing Factors

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

General public

Método de Ataque

obfuscated JavaScript

Canal de Exfiltração

Unknown

Avaliação de Risco

CRITICAL - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

Kit types: credential_harvester, otp_stealer, card_stealer, banking, personal_info
23 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Generic Phishing

Official Website

N/A

Fake Service

Banking/payment service

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 23 techniques to evade detection by security scanners and make reverse engineering more difficult.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domain

tiktok.1d2by.com

Registered

2025-03-25 12:29:42+00:00

Registrar

July Name Limited

Status

Active (309 days old)

Hosting Information

Provider

July Name Limited

ASN

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Scan History for tiktok.1d2by.com

Found 1 other scan for this domain

https://tiktok.1d2by.com/start/ Unknown Jan 29, 2026 01:48