EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of finishoperations.com

Informações de Detecção

https://finishoperations.com/
Detected Brand
Microsoft SharePoint
Country
International
Confiança
98%
HTTP Status
200
Report ID
9e694faa-f8e…
Analyzed
2026-08-05 23:15

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1DF2130EA9881622F44A790D5BB49AB7FF6D6C197D6160E4441FC065FA7E2D04ED36100
CONTENT ssdeep
24:hRfCMZ9lZRN8UjvLsVPOL81SWrdU7dLAvw7Lsp:TT9rzDjv4V884WrdU7d0I7Yp

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c8c2333949ee6667
VISUAL aHash
f87efc7c18080000
VISUAL dHash
b1f8e5f1f292b2f8
VISUAL wHash
fcfefc7c78580800
VISUAL colorHash
1a007000000
VISUAL cropResistant
686c64e46cd4e672,b1f8e5f1f292b2f8

Análise de Código

Nível de Ameaça ALTO
⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Ameaça: Roubo de credenciais
• Alvo: Funcionários corporativos
• Método: Phishing de OAuth/SSO
• Exfil: Roubo de credenciais via login falso
• Indicadores: Domínio extremamente recente, branding enganoso
• Risco: Alto

🎯 Kit Endpoints

  • /auth/login

📊 Detalhamento da Pontuação de Risco

Total Risk Score
95/100

Contributing Factors

Recent Domain
Domain is only 5 days old.
Credential Harvesting
Deceptive OAuth login portal.

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Microsoft SharePoint Phishing Landing Page
Alvo
Microsoft SharePoint users (International)
Método de Ataque
Brand impersonation
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Análise de Falsificação de Marca

Impersonated Brand
Microsoft SharePoint
Official Website
https://sharepoint.microsoft.com
Fake Service
Document Management Portal

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

Uses a fake corporate login interface to trick users into providing their Google/SSO credentials.

Secondary Method: Brand Impersonation

Misrepresents itself as a Microsoft SharePoint portal to target corporate users.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
finishoperations.com
Registered
2026-07-31
Registrar
Unknown
Estado
active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.