Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F375E0221DBD346F186F86A6F2A62E1BAF6EB643C005958DB7FD01815FD7C69C853308 |
|
CONTENT
ssdeep
|
24576:7ZFEeW5AOPmEeW5A4dDEeW5AWnUEeW5AzuwO2OYLScXBIq2g+pKvs8ojDU/u1v:7ZFEsOPmEs4dDEsWnUEs6v |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9d3d34343697b434 |
|
VISUAL
aHash
|
0218183c007e7e7e |
|
VISUAL
dHash
|
8e107069f0d4d4d4 |
|
VISUAL
wHash
|
4218383c387e7e7e |
|
VISUAL
colorHash
|
38001000180 |
|
VISUAL
cropResistant
|
8e107069f0d4d4d4 |
• Threat: Cryptocurrency drainer/keylogger
• Target: Crypto wallet users
• Method: Generic crypto service site to steal wallet info
• Exfil: Unknown (Likely a custom API)
• Indicators: New domain, generic language, focuses on resolving wallet issues
• Risk: MEDIUM - Potential crypto theft
Pages with identical visual appearance (based on perceptual hash)