Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T122F1FAE34310885E1AABC559DF57F149A293E4CBF6321E9093E99B5E44C3DE0EC23E21 |
|
CONTENT
ssdeep
|
192:SYifMTOyUz/y8SqugxuO4Rnigni6U3qV0OKPGlhEgnW:SYifMTOyngVV4POqVbe8EgnW |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8c9ce2e3d1c9d1e1 |
|
VISUAL
aHash
|
7f1f1f180000f0f8 |
|
VISUAL
dHash
|
fabab2b2b2c080c0 |
|
VISUAL
wHash
|
ff1f1f1a0060f0f8 |
|
VISUAL
colorHash
|
061d0000000 |
|
VISUAL
cropResistant
|
fabab2b2b2c080c0 |
• Threat: Phishing attempt impersonating Telegram.
• Target: Telegram users.
• Method: Using a fake domain to trick users into interacting with potentially malicious content.
• Exfil: Unknown, likely aiming to redirect to malicious websites or gather user information.
• Indicators: Domain mismatch, az.alertsgame.ru instead of telegram.org.
• Risk: MEDIUM - Potential for malware distribution or data theft through redirects.
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain