Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D5D2DB20E4549A6303B3C4C4B8356F1AB4D3F32FC92B4A1566F847C8AFD7CA5BE194A5 |
|
CONTENT
ssdeep
|
384:sXCl2rHhSzttttEDCCd2vQnSK8TCFMvwDOr39+QND7EYGtEY0lYJ:D+gwDOr39+QND7EYpA |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d62178c323d7923e |
|
VISUAL
aHash
|
00003c7e3c7e9c80 |
|
VISUAL
dHash
|
c81375cc4de06023 |
|
VISUAL
wHash
|
00007e7eff7ebc80 |
• Threat: Credential harvesting phishing targeting online gambling users.
• Target: Users of Venetian casino.
• Method: Fake login form stealing username and password.
• Exfil: Unknown, likely to a custom API on the attacker's server.
• Indicators: Domain mismatch, login form, unusual domain name.
• Risk: HIGH - Real-time credential theft.
Pages with identical visual appearance (based on perceptual hash)