Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T122C3F8D563A5A3F4F402A3F8C62394713B5728FA7B12C598C2F60E95E21509CCDA9CDB |
|
CONTENT
ssdeep
|
1536:git8lIq6VGv2wW+Mx0AN3wt2h+sn5Y3YgcOCWzMBypQl4zkvlq:ygWcgwlq |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e792699268cc9acd |
|
VISUAL
aHash
|
e7e7ffe7e7e7c3c1 |
|
VISUAL
dHash
|
484d78684c4c9283 |
|
VISUAL
wHash
|
2742feaee7e70180 |
|
VISUAL
colorHash
|
070420000c0 |
|
VISUAL
cropResistant
|
484d78684c4c9283 |
• Threat: Cryptocurrency wallet phishing targeting Solana wallets
• Target: Pudgy Penguins NFT holders
• Method: Claims eligibility for a crypto airdrop to trick users into connecting their wallets
• Exfil: Wallet credentials and funds are likely transferred to the attacker
• Indicators: Domain name unrelated to the official website, encourages connecting crypto wallet, cryptocurrency reward claim
• Risk: CRITICAL - High risk of immediate cryptocurrency theft
Pages with identical visual appearance (based on perceptual hash)