Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C2C10DA512019E3EA96342E6BB31777A23B69285D786130895FE97781FC4D0DEC3F8C4 |
|
CONTENT
ssdeep
|
96:nOYe1R+AxbGJIiKjj1Thk4939me27J8wzwTwTwr:OY+R+/rKjEu9me2N8wzwTwTwr |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9fb1654a84cfb831 |
|
VISUAL
aHash
|
010a8fbd1eb83822 |
|
VISUAL
dHash
|
375a1561a8697256 |
|
VISUAL
wHash
|
032a8fbd3eb8383a |
• Threat: Credential harvesting phishing kit targeting Netflix users.
• Target: Netflix users.
• Method: A fake Netflix landing page hosted on a free hosting service is used to collect email addresses.
• Exfil: Data is likely being sent to an attacker-controlled server or service.
• Indicators: Free hosting domain, Netflix logo, email input field.
• Risk: HIGH - Potential for immediate credential theft.
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain