Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

FB 標註粉絲專業詐騙怎麼辦? 教你怎麼辨別

如果收到粉絲團偽冒 FB 支援團隊的通知違反社群守則 要求填寫驗證資訊…百分百都是詐騙!

要不然你看那麼多人被鎖…以下略

總之因為使用短網址,沒辦法看到真實網域

可以使用 https://www.urlvoid.com/ 先還原

不過結果出乎意料的是安全的?

我們回到臉書上看一下發文自帶的縮圖

最下面竟然顯示短網址還原的位置!

回到 virustotal 上檢查

https://www.virustotal.com/gui/domain/confirmationpage587346.co.vu/detection

看得出有問題囉

是個釣魚網站

到 Detail 觀察

因為是 URL 所以一定有背後的 IP ,可以看 DNS 的 A Record

得到 103[.]18[.]6[.]189

同樣接著查之後

雖然沒有被偵測到,切換到 Relations

domain 看起來都很類似吧?

觀察 Detail

whois 顯示位置在越南

實際上是一個工廠….

FB 公司的團隊會在這裡麼?

最後 我們從圖看出 這個IP 2021 就存在,陸續換了不少 domain 都是被判定釣魚或惡意

所以點進去之前,要先想想喔

IoC

  1. https://tinyurl[.]com/confirmationpage610214
  2. confirmationpage587346[.]co[.]vu
  3. 103[.]18[.]6[.]189
Back To Top
error: 內容被保護 !!
Buy Me A Coffee
歡迎贊助 sectools.tw 讓這個網站更好~!