Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T134C418A8F2A0640D83A7016AA17F354473B6691EA56844347675CCFAB8E494C327FFFC |
|
CONTENT
ssdeep
|
6144:u3A6e6/RPyUDP0SutXJaJphBXi+ZcWW3Djwe6N8wXVB3q7lBIq5LtBo+8clJ:5OcjqV0Bj5NlX |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d550ea55c52f952a |
|
VISUAL
aHash
|
cccc0e1e0e0603ff |
|
VISUAL
dHash
|
989c9c7aaa3a6b0d |
|
VISUAL
wHash
|
eccc0e3e0e0603ff |
|
VISUAL
colorHash
|
07606000000 |
|
VISUAL
cropResistant
|
989c9c7aaa3a6b0d,7e7f7f79797e7f5a,26233212d3d3d2d2,8e8c3c7cacaeae25 |
• Threat: Low-risk website using free hosting
• Target: Users interested in a real estate broker in Portland
• Method: Informational website with no malicious activity
• Exfil: No data exfiltration detected
• Indicators: Free hosting on GoDaddy
• Risk: LOW - No immediate threat, but use caution
Pages with identical visual appearance (based on perceptual hash)
Found 4 other scans for this domain