Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A9E229B49230D335B1C24BE8DA6425287A5FE1DCD7C695B4F388AF51B0D6CE8D9260CB |
|
CONTENT
ssdeep
|
384:4r/aJcuvq8lRhiXkdvNTDhPhLxeAxeDWNW1Tp34PxeeJEmuW3AsSiRWGMd:4r/aJcuvnhhPhleMeDGCSPxeeWmH5W |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f02317fc6c074b4e |
|
VISUAL
aHash
|
806660e0d8ded610 |
|
VISUAL
dHash
|
5cdcda93b1b4ac21 |
|
VISUAL
wHash
|
806666f0d8dedf90 |
|
VISUAL
colorHash
|
38001000c40 |
|
VISUAL
cropResistant
|
b62c69c89081020c,5cdcda93b1b4ac21 |
• Threat: Credential harvesting phishing kit impersonating Stake
• Target: Users of the Stake gambling platform
• Method: Fake registration form steals email and password
• Exfil: Data sent to unknown location via JavaScript form submission.
• Indicators: Unrelated domain, new domain, obfuscated JavaScript, and form submission detected.
• Risk: HIGH - Immediate credential theft.
Pages with identical visual appearance (based on perceptual hash)