Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1071148604046CD27C993E2E8A7B64A0BA3D5C300CA8B1A0057E8C7EE0EEBD95DC5A4A4 |
|
CONTENT
ssdeep
|
12:nwMy7FUUyidhzMFQ9SCcfpqdNHN3KW9rdBbiVQBYE:n/CxdYflBm3WVQBYE |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ea95a295cdd8b234 |
|
VISUAL
aHash
|
ffe3e1f9b0a1e0e0 |
|
VISUAL
dHash
|
e54f0b33634d4d4d |
|
VISUAL
wHash
|
ffa5a5f8b0a0e0e0 |
|
VISUAL
colorHash
|
06600040001 |
|
VISUAL
cropResistant
|
e54f0b33634d4d4d,3060e0e0e0c0c0e0,094911c661666e6c,22266e97968a8b5b,1d2d4e3471210953 |
⢠Threat: Credential harvesting phishing attack
⢠Target: SwissPass users
⢠Method: Fake login page to steal email addresses
⢠Exfil: Unknown (likely to a attacker-controlled server)
⢠Indicators: Unofficial domain (teamsupport.jdevcloud.com), SwissPass logo
⢠Risk: HIGH - Potential for immediate credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain