Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1385151B3989D75131B169EDCBAE0F34EE193C39C8B801EC8E1E5811EA5C0DFDC981185 |
|
CONTENT
ssdeep
|
48:7+A1nIGNcIDL7lRDLVwXwdPzxNBFBDrtb0rB7ItQKIVT89bxLxRrAzAFyWMeP:rbJPzjBF4BMulV499tGzgy/eP |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3336464319b6575 |
|
VISUAL
aHash
|
c3efededc7c3ffff |
|
VISUAL
dHash
|
860929699c062800 |
|
VISUAL
wHash
|
003c0c0cc7e3f3f3 |
• Threat: Brand impersonation phishing
• Target: Free Fire players
• Method: Impersonates Free Fire with fake content and offers.
• Exfil: No data exfiltration detected
• Indicators: Blogspot subdomain, mismatched URL to brand, old domain
• Risk: LOW - Misleading content, potential for future phishing
Pages with identical visual appearance (based on perceptual hash)