Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T195323DB4C969E5770292B1E4D3761BE93FC18242C6638B1863F8834D6BD9D4BCD23A34 |
|
CONTENT
ssdeep
|
96:nsxY1dYJsLZAtoq7EI35Epy3xwWMVPcQ4iwWMVPcQ4iwWMVPcQ4iwWMVPcQ4vnH2:sO1+JXaaavlKFFyXUReTQSlDKlKm |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
fb5bd1c64c870543 |
|
VISUAL
aHash
|
00000099b9ffffff |
|
VISUAL
dHash
|
f85b5b2b2b2b2b96 |
|
VISUAL
wHash
|
00000089b5ffffff |
|
VISUAL
colorHash
|
06000040203 |
|
VISUAL
cropResistant
|
fe80a0c0c0a080fe,868c99f8d8d1c3ce,72f0e0e2cccc9999,5b5b6b2b2b2b2b97,2c2c96599b5c5e4b,c1385b5b5b2b2b2b |
• Threat: Phishing site impersonating Amazon
• Target: Amazon customers worldwide
• Method: Fake Amazon website to deceive users
• Exfil: No form detected, but likely data collection
• Indicators: Free hosting, mismatched domain, no SSL
• Risk: HIGH - Potential for credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain