Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1CEF1013070063877922B56C1F4624B1E2213C335D752195CB7B957A7BFCECE989B26A4 |
|
CONTENT
ssdeep
|
192:oqnZbogS+gVdikIvErEFZ5LfiQLfcLbLfNLVLfdLqgLfKL4McfYNqyTzhBeC3L:bnVgoFZ5LfiQLfcLbLfNLVLfdLJLfKLb |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b373cc4cb1b14ccc |
|
VISUAL
aHash
|
ffe7e7c70000ffff |
|
VISUAL
dHash
|
10280c4c714d0000 |
|
VISUAL
wHash
|
30200000ff00ffff |
|
VISUAL
colorHash
|
07000000e00 |
|
VISUAL
cropResistant
|
10280c4c714d0000,0000101010100000 |
• Threat: Credential harvesting phishing attempt
• Target: WaEGY users
• Method: Fake login page to steal credentials
• Exfil: Unknown (likely a custom API or similar)
• Indicators: Domain mismatch, relatively new domain, lack of security indicators
• Risk: HIGH - Potential for immediate credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain