Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T17621637550005C770202D2F06793B32EBA82855BDA4B1F003AE0C68D9AB4E6EC65938A |
|
CONTENT
ssdeep
|
24:nF8CRN/PAwZcSMNgaWYd0lJzrvnHRNENBVE+cjPfD:njNXLcDgaHdEfRaXGPL |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ec6493936c6c6cc3 |
|
VISUAL
aHash
|
e3ffd3c3f3ffffff |
|
VISUAL
dHash
|
4c49b69616080000 |
|
VISUAL
wHash
|
271d010101030f0f |
|
VISUAL
colorHash
|
070000011c0 |
|
VISUAL
cropResistant
|
4c49b69616080000 |
• Threat: Credential harvesting phishing targeting Facebook users.
• Target: Facebook users, especially those with business accounts.
• Method: A fake Facebook login page hosted on a free hosting platform steals email/phone and password.
• Exfil: The destination of the stolen credentials is not visible in the screenshot.
• Indicators: Free hosting, Facebook branding, login form, "Facebook Monitization" wording.
• Risk: HIGH - Immediate credential theft possible.
Pages with identical visual appearance (based on perceptual hash)
Found 5 other scans for this domain