Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://apps9-facebook.blogspot.com/?m=1
Detected Brand
Facebook
Country
Unknown
Confiança
100%
HTTP Status
200
Report ID
ce4782e8-d9e…
Analyzed
2026-07-11 22:09
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F2E1756B5142E41A1AF3C2BCFAA0771CDD839A8AC7835D4982F48F5E6FD4FA1C44125E |
|
CONTENT
ssdeep
|
96:HlR5Pz6CFCvqYIsBsBIlLc/YIjZqJJMVEIVsngZ8tgF1vT4Is6IvoxVhFv1odu:HlX5Mi3yA/lZVengZ8ty1bJHxiu |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b33399cc6666cc98 |
|
VISUAL
aHash
|
e7e7e7c3e7ffffff |
|
VISUAL
dHash
|
0c0c4c4d0c000800 |
|
VISUAL
wHash
|
c0c0c0c0c0fcfcfc |
|
VISUAL
colorHash
|
07040006000 |
|
VISUAL
cropResistant
|
0c0c4c4d0c000800 |
Análise de Código
Risk Score
85/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Personal Info
🔒 Obfuscation Detected
- eval
- fromCharCode
- unescape
- document.write
- hex_escape
- unicode_escape
🎯 Kit Endpoints
- https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uJ-x3VpZqTGTiBcuCVVNIz1izBbtkgMNO9iC-ccrKz-QFcetFZQ96Kq443q6L3KK15B1IySRzl3MZovMt3nHjUUS7PJex7IyibyDziyvT9m4E=s0-d
- http://apps9-facebook.blogspot.com/
- https://www.blogger.com/feeds/1180064381159681839/posts/default
- https://www.blogger.com/navbar/1180064381159681839?origin=https://apps9-facebook.blogspot.com&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.9vdPKhB0RUg.O%2Fd%3D1%2Frs%3DAHpOoo97anj7zZ432JcN58tqJJp_A6WeOw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fapps9-facebook.blogspot.com&pfname=&rpctoken=24891027
- https://apps9-facebook.blogspot.com/
- https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uEWMaMR5I3I-6deUzyw2YfthQSDVz-_BPh65-_Q96wkUWT5AwrVg9MH1MvkVw2YOb9YWawNjwyHz8LCtze5Ybx9xc5oBHlDz1dEvlkBYG2r0cSeHV2YLFCRDfo8Q=s0-d
- https://apps9-facebook.blogspot.com/feeds/posts/default
- https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1180064381159681839&zx=4e4592d9-d9d4-4173-a8c9-989705adddd0
- https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tbyr9qhHclgMQytnGMWjbzAl5bWUt4ZmF4k0-c4agEe7m500h0c_lYcRowvl7VbhI1P_Dtn0VinJZE2T1H4V5Sb_EFgg4EbKCt6mwbuUoAw6U6GmBqaXg=s0-d
- https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sfSN3zCpPN6-MNcz4vtouocFU00PDEDUZ41D9UgRvDl1QpHKke0A5XFhmTxNYdYNpZX8NRtYiKt0pgbb_d9kCdpDVbKlbrxPmBMbx1X9cKUwfdQ11oby2IixJ1-d6uneof8jy4WehjiUQ1=s0-d
- https://apps9-facebook.blogspot.com/feeds/posts/default?alt=rss
- https://www.blogger.com/profile/08766033240948775135
📡 API Calls Detected
- post
📊 Detalhamento da Pontuação de Risco
Total Risk Score
100/100
Contributing Factors
Active Phishing Kit
Detected kit types: Credential Harvester, OTP Stealer, Personal Info
Code Obfuscation
JavaScript code obfuscated using 28 technique(s) to evade detection
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Two-Factor Authentication Stealer
Alvo
Facebook users
Método de Ataque
obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Personal Info
- 28 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
Facebook
Official Website
https://www.facebook.com
Fake Service
Credential harvesting service
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 28 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
apps9-facebook.blogspot.com
Registered
Unknown
Registrar
None
Estado
Age unknown
Hosting Information
Provider
Unknown
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Facebook
https://www.apps16-facebook.blogspot.com/
Jul 11, 2026
Facebook
https://www.apps34-facebook.blogspot.com/
Jul 11, 2026
Facebook
https://app81-facebook.blogspot.com/
Jul 11, 2026
Facebook
https://www.apps9-facebook.blogspot.com/
Jul 11, 2026
Facebook
https://app30-facebook.blogspot.com/
Jul 11, 2026
Scan History for apps9-facebook.blogspot.com
Found 1 other scan for this domain
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.