Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B6433CF33A51283215E760EB74BBA78DB0B9C6296D09CCE0D0ACC9517B65ED60077F29 |
|
CONTENT
ssdeep
|
768:w3JavjqlrfFyFSK6kuSAIWgJX5kN2Q3+gy1Ln0ctsu4dzWM+4bNwQTcwL:wYqlpkqbcQ3+gOn07u4NFbNwkcc |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ce1ec33c39c3e1c1 |
|
VISUAL
aHash
|
f090f0909090f0f0 |
|
VISUAL
dHash
|
c42424242424c424 |
|
VISUAL
wHash
|
f0f0f0b0f090f0f0 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
c42424242424c424 |
• Threat: Credential harvesting phishing kit
• Target: Salesforce users
• Method: Fake login page that attempts to steal usernames and passwords.
• Exfil: Likely exfiltrates data to a malicious server.
• Indicators: Domain mismatch, the domain name is csdept.csassistant06.com which is not the official Salesforce domain.
• Risk: HIGH - Immediate credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain