Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14931541FB202041B715EF8A5BC559F95A74BC55273AF5EA1B9C0F0B8A4C60D48AB2398 |
|
CONTENT
ssdeep
|
24:B5hwspBOXj5F4D5LwgB4jIDCvMQ3412ZVsRJGknPDgit5kG6kTkuQQHUZeDNM/Us:7hz41F4D5LM3vMQGqsRB8ituGdg1QHT0 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b333339999999989 |
|
VISUAL
aHash
|
ffe7e7ffffffffff |
|
VISUAL
dHash
|
284d4c3000000000 |
|
VISUAL
wHash
|
e0e0f0f0f0f0f0f0 |
• Threat: Domain parking / brand protection
• Target: Domain visitors
• Method: Displaying a message that the domain is registered and protected by MarkMonitor
• Exfil: No data exfiltration
• Indicators: Domain parking message, brand protection
• Risk: LOW - Legitimate brand protection page
Pages with identical visual appearance (based on perceptual hash)