Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16E93B8B29251243320BFB1D5F1297709A2D3D74EC68287E1B2F8636B1ED6CA1FC17856 |
|
CONTENT
ssdeep
|
1536:4lzXWnSraRZuOTFor8BPmzzXXMd6MiucCOK:yzXWdRZuOMkmzzXXMd6M1cCOK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
a41367933cccec93 |
|
VISUAL
aHash
|
0000f3dbffffffc3 |
|
VISUAL
dHash
|
e8c8a63638002606 |
|
VISUAL
wHash
|
000043c3cfffdfc3 |
⢠Threat: Roblox account phishing
⢠Target: Roblox users
⢠Method: Fake Roblox profile page attempting to harvest login credentials and/or game assets.
⢠Exfil: Likely to a command and control server
⢠Indicators: Domain name mismatch, Russian TLD (.ru), no SSL certificate, login form
⢠Risk: HIGH - Account takeover leading to financial loss (virtual currency/assets)
Pages with identical visual appearance (based on perceptual hash)
Found 5 other scans for this domain