Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C7E3767AA1F7173F497EB2A2B6952711A693831B92451BF399FC67890F84DCE3D07008 |
|
CONTENT
ssdeep
|
768:nha/yEl4dJImYf+UgN08+0hn6Au4hqJ5c9XUE:nh6ssxUj+0l6Au4hqSXH |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9010edef453cba4b |
|
VISUAL
aHash
|
ff0d040400ffffff |
|
VISUAL
dHash
|
22999dbcc8218800 |
|
VISUAL
wHash
|
c30c040400ffffff |
|
VISUAL
colorHash
|
07041010000 |
|
VISUAL
cropResistant
|
3a22d9999dbd9ccc,c8e2313844000000,d9999d9dbc9cccea |
• Threat: DHL credential harvesting phishing
• Target: DHL customers
• Method: Fake DHL login form steals email and password
• Exfil: Data likely sent to a malicious server controlled by attackers (using POST)
• Indicators: Domain mismatch (solutionfun.info), login form, non-official branding
• Risk: HIGH - Immediate credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain