Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T119319D3184C48CAF0656C7E88B36771BF2C6865CD7136A0585FA47AE674AD66CC07C85 |
|
CONTENT
ssdeep
|
24:tCcH4/u4F0lC9HXHJbqvDHXHJaV562DQAnA6UR/2DQMjJ92k6dT:lH6u4F0lIbeNaV566QAC6QMjTIdT |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8dad624a3c879d0f |
|
VISUAL
aHash
|
10183e1a18183800 |
|
VISUAL
dHash
|
a1f2f23232f0f0cc |
|
VISUAL
wHash
|
187e3f3f187c7c00 |
|
VISUAL
colorHash
|
39600008001 |
|
VISUAL
cropResistant
|
8c96968eaaaa869e,a1f2f23232f0f0cc |
• Threat: Sports betting scam using Atletico Madrid images and branding
• Target: Asian region sports fans of Atletico Madrid
• Method: Luring users to a fake sports betting site that does not pay out
• Exfil: Potentially steals login credentials or financial information if users deposit funds
• Indicators: Non-official domain, brand impersonation, obfuscated javascript code
• Risk: HIGH - Potential for financial loss and credential theft.
Pages with identical visual appearance (based on perceptual hash)