SafeMode - Analysis: extpaypalupdatenonqs.blogspot.com

Captura Visual

Screenshot of extpaypalupdatenonqs.blogspot.com

Informações de Detecção

https://extpaypalupdatenonqs.blogspot.com/2021/02

Detected Brand

PayPal

Country

International

Confiança

100%

HTTP Status

200

Report ID

efd61a7b-8e8…

Analyzed

2026-01-01 09:50

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T15D5220B29485D93B5363C6E9B3B1A74BFB81C189C886014AE5F5D35C1FE3DB2EC0A215
CONTENT ssdeep	96:j58HUZnoGyPFmGjZz/0/HrJSEmwh2FwGgjP2jHu+pafjztBkXejaE6SindVDJ9D7:j5kUCFMOuNSEGwt+UgjfDJep9ZTsrUJU

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	de7e61a1a19e9e80
VISUAL aHash	80809c9cffffffff
VISUAL dHash	2822343003202024
VISUAL wHash	80809c80cfcfcfc7
VISUAL colorHash	07007000000
VISUAL cropResistant	2822343003202024,0090f006e0e0e0e8

Análise de Código

Risk Score 89/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Representação de marca por meio de phishing usando um serviço de hospedagem gratuito.
• Alvo: Usuários do PayPal.
• Método: A página de phishing usa o logotipo e a marca do PayPal, mas está hospedada em um domínio blogspot, provavelmente levando a um formulário para roubo de credenciais.
• Exfil: A ação do formulário aponta para o domínio blogspot, sugerindo exfiltração de dados por meio de um script personalizado ou método semelhante.
• Indicadores: Hospedagem gratuita, domínio diferente do oficial, representação de marca, ofuscação detectada.
• Risco: ALTO - Roubo de credenciais e potencial comprometimento da conta.

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/share-post.g?blogID=4165901018681820242&postID=8043106242831253549&target=twitter
https://www.blogger.com/profile/11377455202849998003
https://www.blogger.com/share-post.g?blogID=4165901018681820242&postID=8043106242831253549&target=email
https://extpaypalupdatenonqs.blogspot.com/feeds/posts/default?alt=rss
https://www.blogger.com
https://extpaypalupdatenonqs.blogspot.com/feeds/posts/default
https://extpaypalupdatenonqs.blogspot.com/2021/02/blog-post.html#comments
https://www.blogger.com/share-post.g?blogID=4165901018681820242&postID=8043106242831253549&target=
https://extpaypalupdatenonqs.blogspot.com/
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://www.blogger.com/share-post.g?blogID=4165901018681820242&postID=8043106242831253549&target=facebook
https://extpaypalupdatenonqs.blogspot.com/2021/02/
https://www.blogger.com/go/report-abuse
https://www.blogger.com/share-post.g?blogID=4165901018681820242&postID=8043106242831253549&target=pinterest
https://extpaypalupdatenonqs.blogspot.com/2021/02/blog-post.html
https://extpaypalupdatenonqs.blogspot.com/search
https://www.blogger.com/feeds/4165901018681820242/posts/default