Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B644E9D976827472937334B4903F000BB2BEAC56F54C8964F18AD9D57E789A89237F2C |
|
CONTENT
ssdeep
|
6144:lMw96TSDP5T59PJMo4hiQqRDBu5p7xqy1k:lMw96T6bMoktoI3Fqy1k |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c6ce3931399393b2 |
|
VISUAL
aHash
|
003c7e3c3c7e3c00 |
|
VISUAL
dHash
|
01e4d4d4d4d4d400 |
|
VISUAL
wHash
|
003c7e7e7e7e3c00 |
• Threat: Informational page possibly linking to darknet services
• Target: Users looking for Kraken's presence on the darknet
• Method: Providing links to access Kraken or related services via TOR or other channels
• Exfil: No data exfiltration detected, only informational links
• Indicators: Free hosting, TOR mention, links to Telegram and other tools
• Risk: LOW - Informational page, no credential harvesting
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain