Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18B417BB28045DB639283A1E0DB76271BB3C1C645CE5B0B0166F893EE5FDBD94CD1B012 |
|
CONTENT
ssdeep
|
24:2OSNEKUcDPiQ+NB8EYCQp26BS9Fp26BS0d/p26BNLu5h9y6Tt/11Zixm:dSVhDKNrFQLBuFLBTRLBdu/86T/1Um |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e3ce1893639964ce |
|
VISUAL
aHash
|
e7e7e7e7e3c3c7c3 |
|
VISUAL
dHash
|
0e0e0c0e0e9e9e96 |
|
VISUAL
wHash
|
c3c3c3c3c3c3c3c3 |
|
VISUAL
colorHash
|
07018000200 |
|
VISUAL
cropResistant
|
0e0e0c0e0e9e9e96,2d242034bececfcf |
• Threat: Advertising redirection/malvertising
• Target: Users in the UK region
• Method: Luring to unofficial website
• Exfil: None (redirection to gambling site)
• Indicators: Domain mismatch, unknown domain, link to gambling services
• Risk: MEDIUM - Potentially leading to gambling risks
Pages with identical visual appearance (based on perceptual hash)