Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T17D72ED20B854DC1640FBBDDDA6B29E2E50F98341E5650289ED9BC3F907A3D6DCB335A0 |
|
CONTENT
ssdeep
|
192:FRgTH4SK45ST0iDp/VUJMA8nHFgWCLU8YanJz:FRgTip/VjA8nHFjuU8YanJz |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b6b22cc7c9c9c319 |
|
VISUAL
aHash
|
3e8787fffff70000 |
|
VISUAL
dHash
|
702c2ccc3cec2d31 |
|
VISUAL
wHash
|
108787fffff70000 |
|
VISUAL
colorHash
|
07000000038 |
|
VISUAL
cropResistant
|
702c2ccc3cec2d31 |
• Threat: Potential data collection form with a suspicious domain name
• Target: FedEx customers
• Method: Form requests personal contact information for shipping services
• Exfil: Potentially sent to a server controlled by an unknown entity
• Indicators: Unrelated domain name racing168.com
• Risk: LOW - Data collection risk due to domain name mismatch but the content of the form itself aligns with legitimate shipping process
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain