Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T152C57DD47365703647DB9096507A0542F33A74A91808842CFA2CE8EB7BA9C4972FFFB5 |
|
CONTENT
ssdeep
|
49152:uPIWChMkThabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4tgJSs89CqqqeK:/PaHKPsqPjTxXy |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8bb320ccc6779999 |
|
VISUAL
aHash
|
ffffffe718180000 |
|
VISUAL
dHash
|
00102a2ab2b20c10 |
|
VISUAL
wHash
|
ffffffc618180000 |
|
VISUAL
colorHash
|
07001480000 |
|
VISUAL
cropResistant
|
00102a2ab2b20c10 |
• Threat: Phishing targeting Microsoft users.
• Target: Users of Microsoft services
• Method: Imitates a legitimate Microsoft sign-in page to potentially harvest credentials or redirect to malicious sites.
• Exfil: Unknown, but likely aims to steal credentials or personal information.
• Indicators: The domain pub-84a8b022128b4443a6d59b25513f1cf6.r2.dev, which is not an official Microsoft domain, is hosting the page. The page displays a Microsoft logo and the phrase 'Taking you to your organization's sign-in page'.
• Risk: HIGH - Potential credential theft or malware installation.
Pages with identical visual appearance (based on perceptual hash)
Found 5 other scans for this domain