EN ES PT
Back to Stats

Captura Visual

No screenshot available

Informações de Detecção

https://signin.broker/ibvC2nuFhKniBQeO
Detected Brand
DP World
Country
International
Confidence
100%
HTTP Status
200
Report ID
d0fe5790-f69…
Analyzed
2026-02-12 11:51

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1E6D1E17160409D3B8283C7E4B3B96B8B3394C746EA87565A67F4C35C1EF3E16CC1A226
CONTENT ssdeep
96:nIpkCGTHRPypyz97krwkMzFs39TbJG9KjsWsjOut0U2gs0sjOuIOVJQ6Q6ynQjNq:9LVk8hS9TbJG9aEbOVJQyyQjs

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9c497326cc99d966
VISUAL aHash
18001818191f0f9f
VISUAL dHash
7161713331727d38
VISUAL wHash
191818181f1f1fff
VISUAL colorHash
07000000180
VISUAL cropResistant
7161713331727d38

Análise de Código

Risk Score 70/100
Threat Level MEDIO
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários do DP World
• Método: Personificação via página de login
• Exfil: Credenciais do usuário
• Indicadores: Incompatibilidade de domínio, formulário de login
• Risco: Moderado

🎯 Kit Endpoints

  • https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000001-0000-cff1-ce00-392142796964&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=d98292e6-fa3f-ce32-1347-21bc5137cc6d&protectedtoken=true&domain_hint=dpworld.com&nonce=937800828777.ec82d3ed-b372-7cd6-3e42-fcfc13352e79&state=bWF0cy52YW5saWVyb3BAZHB3b3JsZC5iZQ#
  • https://passwordreset.microsoftonline.com/?ru=https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000001-0000-cff1-ce00-999529121568&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=d98292e6-fa3f-ce32-2875-21bc5137cc6d&protectedtoken=true&domain_hint=dpworld.com&nonce=944188619377.ec82d3ed-b372-7cd6-3e42-fcfc13352e79&state=bWF0cy52YW5saWVyb3BAZHB3b3JsZC5iZQ#
  • https://login.microsoftonline.com/common/login#
  • https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000001-0000-cff1-ce00-633621548440&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=d98292e6-fa3f-ce32-7375-21bc5137cc6d&protectedtoken=true&domain_hint=dpworld.com&nonce=185300279491.ec82d3ed-b372-7cd6-3e42-fcfc13352e79&state=bWF0cy52YW5saWVyb3BAZHB3b3JsZC5iZQ#

📊 Detalhamento da Pontuação de Risco

Total Risk Score
65/100

Contributing Factors

Domain Mismatch
The domain signin.broker is not associated with DP World. This is a critical indicator.
Login Form
The page requests login credentials.
Impersonation
The site visually resembles the DP World login, increasing the chance of success.

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Two-Factor Authentication Stealer
Alvo
DP World users (International)
Método de Ataque
Brand impersonation
Canal de Exfiltração
Unknown
Avaliação de Risco
HIGH - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Personal Info

🏢 Análise de Falsificação de Marca

Impersonated Brand
DP World
Fake Service
Login

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The attacker is attempting to steal user credentials by creating a fake login page that mimics the appearance of DP World's login.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domain
signin.broker
Registered
Unknown
Registrar
Unknown
Status
Inactive

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.