Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1BE538320B5892CBE6413B1C9EC14BE0EB4F6A3FC7B57079410B45DBE79E2934CA38659 |
|
CONTENT
ssdeep
|
768:7NW77AkEBkJ06KiXW4IVD1CaazaEAwhvShIv+aQQX5hvShIv+aQQXrrLD/1x6lDj:ZW77AZBkJ9jXW4IVRuaEBL1x6lDgfU |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8c31376e33cccc33 |
|
VISUAL
aHash
|
0018181818181800 |
|
VISUAL
dHash
|
8cd2f2b2b3b2b0cc |
|
VISUAL
wHash
|
027e3e7e7c3c7c00 |
|
VISUAL
colorHash
|
38001c00000 |
|
VISUAL
cropResistant
|
8cd2f2b2b3b2b0cc |
• Threat: Impersonation/Gambling Redirect
• Target: Mellstroy brand followers
• Method: Age verification gate to redirect users to betting sites
• Exfil: User clicks/Traffic routing
• Indicators: Extremely recent domain creation
• Risk: Moderate
The site acts as an age-gate portal to redirect users to unauthorized or affiliate gambling platforms.
Uses the name of a public figure to attract traffic.