Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15331967150928E1EB38283A9CFB0B68983D4D944C7161F1C60E476FD0ECDE48C8BB15C |
|
CONTENT
ssdeep
|
24:haWCMespQQs+Lnz/OCavs5vqwJatEqLrqTPPC+bzQgUZq0ff++xMJTb:vpQR0nzWRs5CMaSPT5bzQlQsS |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b9f44076b569360b |
|
VISUAL
aHash
|
471f0f0f0f07090f |
|
VISUAL
dHash
|
9ebe7fbf3d3f737b |
|
VISUAL
wHash
|
475f0f0f0f07190f |
|
VISUAL
colorHash
|
06203000080 |
|
VISUAL
cropResistant
|
fafaf0f0c0e00ce6,daeadbdbdbb6c3c9,c6de7e961f1d3e36,9f9b9b8b0b0f4f4b,ee6f73472f270706 |
Fake Fastway Couriers site positioned to capture victims through SEO tactics, typosquatting, or paid advertising. Serves as entry point for multi-stage attacks including credential theft and malware distribution.
JavaScript intercepts form submissions before they reach the fake backend. This allows real-time credential harvesting and validation without server round-trips.
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain