SafeMode - Analysis: telstra23.blogspot.in

Captura Visual

Informações de Detecção

https://telstra23.blogspot.in

Detected Brand

Telstra

Country

Australia

Confiança

100%

HTTP Status

200

Report ID

d3dcfc54-7e0…

Analyzed

2026-03-02 07:28

Final URL (after redirects)

https://telstra23.blogspot.com/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C54251A1A644AA3B1263D7D9B3B3B74BFA828085C8C2004AD5F5E35D1FE3D71EC1A315
CONTENT ssdeep	96:DcTSJZ4Z52HUnoGyPs44mGjZzm/MK4yYeyBqEE8q5AbDowGgjdpoksSuh9CaVZ/r:wTmnFbOfQ3wtpEE8epC5cTBrd0

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	fe5e6161616c1e94
VISUAL aHash	80809c80ffffffff
VISUAL dHash	2b38303003202024
VISUAL wHash	80809c80f0f0f0f0
VISUAL colorHash	070020001c0
VISUAL cropResistant	2b38303003202024

Análise de Código

Risk Score 74/100

Nível de Ameaça MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Falsificação de identidade
• Alvo: Clientes da Telstra
• Método: Hospedagem no Blogspot e redirecionamento
• Exfil: Potencialmente dados de clientes da Telstra
• Indicadores: Domínio Blogspot, ausência de marca legítima, redirecionamentos
• Risco: Moderado

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/go/report-abuse
https://telstra23.blogspot.com/feeds/posts/default?alt=rss
https://telstra23.blogspot.com/2022/10/redirection_21.html
https://www.blogger.com
https://www.blogger.com/feeds/5506792530149997013/posts/default
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=
https://telstra23.blogspot.com/2023/04/
https://telstra23.blogspot.com/2022/10/redirection_21.html#comments
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=pinterest
https://telstra23.blogspot.com/
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=facebook
https://telstra23.blogspot.com/feeds/posts/default
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=twitter
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=email
https://telstra23.blogspot.com/search
https://www.blogger.com/profile/10361119388413162869

📡 API Calls Detected

GET
post

📤 Form Action Targets

https://telstra23.blogspot.com/search

📊 Detalhamento da Pontuação de Risco

Total Risk Score

75/100

Contributing Factors

Suspicious Domain

Uses a domain that is not a primary Telstra domain and hosted on blogspot.

Poorly Designed Website

Generic layout and lack of brand-specific design elements. Also, the redirection.

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Credential Harvesting Kit

Alvo

Telstra users (Australia)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

HTTP POST to backend

Avaliação de Risco

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Personal Info
11 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Telstra

Official Website

https://www.telstra.com.au/

Fake Service

Potential redirection for credential harvesting. Might be tricking to enter login credentials or download malware

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The site likely redirects users to a phishing page designed to steal credentials by mimicking the Telstra login page. The attacker relies on users trusting the Telstra name in the URL.