Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DD6252B258926A3B01E391D7B3B2273BB2E2868AD5D7170593FC8B8F4AD6CC0FD11415 |
|
CONTENT
ssdeep
|
384:7FkNIIipM+RUaMy45LCkLP1YubENDL6V1YDEiDH9A1YqE2D2sv9i390l:7iNIIizRIB93s0l |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3675c393898c59e |
|
VISUAL
aHash
|
0070767f67601c3c |
|
VISUAL
dHash
|
1bc7c4cccdc77971 |
|
VISUAL
wHash
|
00707f7f7f63003c |
|
VISUAL
colorHash
|
380020001c0 |
|
VISUAL
cropResistant
|
1bc7c4cccdc77971 |
⢠Threat: Crypto investment scam
⢠Target: Retail investors
⢠Method: Promises of passive income via AI trading bot
⢠Exfil: JavaScript-based form submission
⢠Indicators: Obfuscated JS code, get-rich-quick claims
⢠Risk: High
Prompts users to click 'Activate Robot' to initiate a sign-up process that captures contact details and potentially connects crypto wallets.
Uses fake live signal feeds to simulate platform activity and create false confidence.