Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A222EFA0665D38EE4102F147ED08BB0A7DE741FE7F7A231215F86D6F35E3824C66921A |
|
CONTENT
ssdeep
|
192:g07A01FSjM4+mE1X6Rw5CJVvnDSOkehhxFplKyXfW4P:fxFWM4tEM7n97xFLK8fp |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c269303c2f9a6d6b |
|
VISUAL
aHash
|
007e607c007e7e66 |
|
VISUAL
dHash
|
b2d4d0c8c4d4d4cc |
|
VISUAL
wHash
|
007e6c7e007e7e66 |
|
VISUAL
colorHash
|
30007000000 |
|
VISUAL
cropResistant
|
b2d4d0c8c4d4d4cc |
• Threat: Brand impersonation phishing
• Target: Kraken users
• Method: Impersonating Kraken to potentially distribute malware or direct to phishing sites
• Exfil: No immediate data exfiltration, likely redirect to a malicious site
• Indicators: Non-official domain, darkweb related domain name
• Risk: HIGH - Could lead to credential theft or malware infection
Found 1 other scan for this domain