Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11B919BB09082BA3702D7C3D1EB36979F72E8C694EA43970547F093484ACAE5EED65924 |
|
CONTENT
ssdeep
|
96:n49UJJ0GZDQBrUmFVD4arbyoGJbeq/M/AdhrAk1R6RKB:49oJ0Rhn/AdhrAA8RKB |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8e19194ed4cd4f4e |
|
VISUAL
aHash
|
000b01ffb430f7ff |
|
VISUAL
dHash
|
72dbdd9c646565a5 |
|
VISUAL
wHash
|
000b01ffb0b0f3ff |
|
VISUAL
colorHash
|
07207000000 |
|
VISUAL
cropResistant
|
8282e2eaeae28282,dbdf9ba4646565a5,63db1adbdffd9d9e,d9e6766663697926,4c9736666d595932,aeccd9d9bbbfbfbb,616c7e5e3e7e7c7c,1e07010303030d0d |
• Threat: Brand impersonation phishing targeting Amazon customers.
• Target: Amazon customers.
• Method: Displays Amazon branding but uses a free hosting subdomain.
• Exfil: No form or login is visible but likely will contain malicious links to data harvesting sites
• Indicators: Free hosting, Amazon logo, domain mismatch
• Risk: HIGH - Brand impersonation leads to further phishing attacks
Pages with identical visual appearance (based on perceptual hash)
Found 8 other scans for this domain