SafeMode - Analysis: luqmanlegal.com

Captura Visual

No screenshot available

Informações de Detecção

http://luqmanlegal.com/said/servicio.html

Detected Brand

Aruba.it

Country

Italy

Confiança

99%

HTTP Status

200

Report ID

cf2cfea9-84a…

Analyzed

2026-01-26 13:58

Final URL (after redirects)

https://luqmanlegal.com/said/servicio.html

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1327196709294743E04D5C3D8B7A17F2A27C28195E742096993EACB2E8FD7E50DC01DE9
CONTENT ssdeep	48:GjPCeNmTNMgEMFIiGy5a9O/qIXmQJIkQSqyBhor9ak1mrQ9GEj3sJRp7ic1dqQr:GjiERlynmQKyzK2usfBqK

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d71a5d2a772a5522
VISUAL aHash	00fffffffffffffe
VISUAL dHash	28004d686810010e
VISUAL wHash	001c2434e7dbf9e0
VISUAL colorHash	07000038040
VISUAL cropResistant	309964694810010e,00000288988c4208

Análise de Código

Nível de Ameaça BAJO

🔬 Threat Analysis Report

• Ameaça: Nenhuma ameaça detectada
• Alvo: Não aplicável
• Método: Não aplicável
• Exfil: Nenhuma exfiltração de dados
• Indicators: O domínio parece legítimo e corresponde à marca mostrada na captura de tela.
• Risk: BAIXO - Domínio legítimo para Aruba.it

🔐 Credential Harvesting Forms

📤 Form Action Targets

py.html

📊 Detalhamento da Pontuação de Risco

Total Risk Score

0/100

Contributing Factors

Credential Harvesting

Credential harvesting detected with 1 form(s) capturing sensitive data

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Unknown Threat

Alvo

Aruba.it users (Italy)

Método de Ataque

credential harvesting forms

Canal de Exfiltração

HTTP POST to backend

Avaliação de Risco

LOW - Automated credential harvesting with HTTP POST to backend

🏢 Análise de Falsificação de Marca

Impersonated Brand

Aruba.it

Official Website

Unknown

Fake Service

Fraudulent service portal

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

Victim enters credentials into 1 fake form. Form data is captured via JavaScript or backend submission and transmitted to attacker's server for account compromise.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.