Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D8D200713D03AC16314F06DFA11B150E61D1DBC8EA63BAD5A8F0E3285AF9DA0BBF5254 |
|
CONTENT
ssdeep
|
192:cGNVwUgX0O57mmCT5fRg4FDkAb/+7QHTSUdH9yPs2WWbHxnZqcCFufDXlcs0YCOJ:cGNVnOJmmK5fRrFgAkQHTPSxnQIbdGq |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
98b7b29c9a93b8b0 |
|
VISUAL
aHash
|
ff00003c18180000 |
|
VISUAL
dHash
|
30400c7130300801 |
|
VISUAL
wHash
|
ffb0303c3c383031 |
|
VISUAL
colorHash
|
07000030000 |
|
VISUAL
cropResistant
|
0000303030000000,6969e194bdbc9c94,2d2dadecd2b6ac58,382da3268da42200,82a2a2d4c4a2a282,0006697132300811 |
• Threat: Brand impersonation phishing
• Target: Customers of Central Distribuidora in Brazil
• Method: Website that imitates the visual identity of Central Distribuidora to trick users into believing they are on the legitimate website
• Exfil: Unknown, likely aiming for personal information upon registration.
• Indicators: New domain, TLD (.online), obfuscation, base64 encoding, WhatsApp icon
• Risk: HIGH - Potential theft of personal information and redirection to malicious links.
Pages with identical visual appearance (based on perceptual hash)