Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B32256F5A380AC2B932325D5F091F3CAA007660FEBC99784779D07F616DBCB70425569 |
|
CONTENT
ssdeep
|
192:f1F3+W1PcwUEK2G27tXt/cB3BQxvwUEK2G2LitXtyet2JcCoOXGXorjj3:f1F3+W1pd/cB3BGJdyCocNO0C33 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ca1fca1dca1dc83c |
|
VISUAL
aHash
|
0000e7e7e70000ff |
|
VISUAL
dHash
|
6969968e8c5947e9 |
|
VISUAL
wHash
|
0000e7e7e781e1ff |
|
VISUAL
colorHash
|
07e00000000 |
|
VISUAL
cropResistant
|
8100c9c109c980d1,69698e868ccc5547 |
• Threat: Potential document download with possible embedded scripts.
• Target: Users expecting a document from TLC Management.
• Method: User is prompted to review or download a document.
• Exfil: Unknown, requires further analysis of the linked documents.
• Indicators: Use of flow.page, potential obfuscation in linked documents.
• Risk: LOW - Risk depends on the safety of the linked document content.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain