Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13DB27630B1085D77069382EAF3799B9FB2EE8145CB03075117FE432C97E6E99DC2A295 |
|
CONTENT
ssdeep
|
384:5Dn1K24yhhMcKn/ktiHI3ofxEbLfrUY4z+RafkYGRk4DkxC7pZ/i49k8zkNEjK:5D1n2vktWUazIa88Y7pxhsEjK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c2e61c3979f38c26 |
|
VISUAL
aHash
|
fffffffc00000000 |
|
VISUAL
dHash
|
1de5c5d908326832 |
|
VISUAL
wHash
|
ffffffff00000000 |
|
VISUAL
colorHash
|
32006400000 |
|
VISUAL
cropResistant
|
1de5c5d908326832 |
• Threat: Financial/Crypto Scam
• Target: Retail Investors
• Method: Impersonation of a legitimate-looking crypto platform
• Exfil: User registration data/wallet connectivity
• Indicators: Generic branding, template-based design
• Risk: Moderate
The site lures users to register to 'exchange' crypto, likely to solicit deposits that cannot be withdrawn.
N/A