Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16672637280B153EF3AB6D090B9D6369B5F7280C5F73267C4E5F6CA68B2C0461997306B |
|
CONTENT
ssdeep
|
192:TwySA3ZevqmRkvqqnvqZ2xxvq3PPeDxvqXHCVJhSCVJhTvqFpgx8gmvqr15vqXyU:ThZMT5H3CVJMCVJcKOjnWP4/++Gk/P1 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3cbce2c993388c3 |
|
VISUAL
aHash
|
ffffe7c3c3c3c3ff |
|
VISUAL
dHash
|
78694d8e969e8e69 |
|
VISUAL
wHash
|
ffffc3c30000003c |
|
VISUAL
colorHash
|
060000001c0 |
|
VISUAL
cropResistant
|
78694d8e969e8e69,53766ebcbecbcf17 |
• Threat: Brand impersonation phishing targeting AT&T customers.
• Target: AT&T customers.
• Method: Uses a different domain than the official AT&T website to display marketing content.
• Exfil: Unknown - this is primarily a marketing advertisement but could lead to phishing on click.
• Indicators: Domain mismatch, brand impersonation.
• Risk: HIGH - Could lead users to believe it's a legitimate AT&T communication.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain