SafeMode - Analysis: telstra23.blogspot.com

Captura Visual

Informações de Detecção

https://telstra23.blogspot.com

Detected Brand

Telstra

Country

Australia

Confiança

100%

HTTP Status

200

Report ID

f158db6a-115…

Analyzed

2026-03-02 07:27

Final URL (after redirects)

https://telstra23.blogspot.com/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C54251A1A644AA3B1263D7D9B3B3B74BFA828085C8C2004AD5F5E35D1FE3D71EC1A315
CONTENT ssdeep	96:DcTSJZ4Z52HUnoGyPs44mGjZzm/MK4yYeyBqEE8q5AbDowGgjdpoksSuh9CaVZ/r:wTmnFbOfQ3wtpEE8epC5cTBrd0

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	fe5e6161616c1e94
VISUAL aHash	80809c80ffffffff
VISUAL dHash	2b38303003202024
VISUAL wHash	80809c80f0f0f0f0
VISUAL colorHash	070020001c0
VISUAL cropResistant	2b38303003202024

Análise de Código

Risk Score 74/100

Nível de Ameaça MEDIO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Falsificação de identidade
• Alvo: Clientes da Telstra
• Método: Blogspot usado para potencial redirecionamento ou conteúdo malicioso.
• Exfil: Provável redirecionamento para outro site desconhecido (não visível).
• Indicadores: Blogspot, domínio incompatível, conteúdo mínimo, ofuscação.
• Risco: Moderado

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
hex_escape
unicode_escape

🎯 Kit Endpoints

https://www.blogger.com/go/report-abuse
https://telstra23.blogspot.com/feeds/posts/default?alt=rss
https://telstra23.blogspot.com/2022/10/redirection_21.html
https://www.blogger.com
https://www.blogger.com/feeds/5506792530149997013/posts/default
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=
https://telstra23.blogspot.com/2023/04/
https://telstra23.blogspot.com/2022/10/redirection_21.html#comments
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=pinterest
https://telstra23.blogspot.com/
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=facebook
https://telstra23.blogspot.com/feeds/posts/default
/responsive/sprite_v1_6.css.svg#ic_post_blogger_black_24dp
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=twitter
https://www.blogger.com/share-post.g?blogID=5506792530149997013&postID=2198187955368390031&target=email
https://telstra23.blogspot.com/search
https://www.blogger.com/profile/10361119388413162869

📡 API Calls Detected

GET
post

📤 Form Action Targets

https://telstra23.blogspot.com/search

📊 Detalhamento da Pontuação de Risco

Total Risk Score

65/100

Contributing Factors

Domain Mismatch

Domain does not match the official brand domain.

Blogspot Hosting

Blogspot often used for phishing.

Obfuscation Detected

Suspicious javascript code obfuscation

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Credential Harvesting Kit

Alvo

Telstra users (Australia)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

HTTP POST to backend

Avaliação de Risco

HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Personal Info
11 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Telstra

Official Website

https://www.telstra.com.au/

Fake Service

Unspecified

⚔️ Metodologia de Ataque

Primary Method: Impersonation

The attacker attempts to impersonate Telstra by using a similar name and logo to trick users into clicking on malicious links or entering credentials.