Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E8856CE93141F9B4DBEB4199803F4909F33D2519200D8468F76CDCEB6AA4859B1B3FB9 |
|
CONTENT
ssdeep
|
24576:x+ZujuVK8S8e8u8KsGdu7o5kUqcA/dTvYgzo:x+wjuO5kUtABa |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b333cccccc33338c |
|
VISUAL
aHash
|
ffc7c7c7ffefefef |
|
VISUAL
dHash
|
519c8d8d16161e1e |
|
VISUAL
wHash
|
09c7c7c7c3c3c383 |
|
VISUAL
colorHash
|
07006000000 |
|
VISUAL
cropResistant
|
519c8d8d16161e1e,96f979f47833e4f4 |
• Threat: Informational content hosted on Gitbook.
• Target: Exodus users.
• Method: Documentation for the Exodus login process.
• Exfil: No data exfiltration detected.
• Indicators: Legitimate Gitbook domain, documentation content.
• Risk: LOW - Informational content, no immediate risk.
Pages with identical visual appearance (based on perceptual hash)
Found 4 other scans for this domain