Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B17309F162B4667C000703D9EFD36AE4232DE16DE1B34684B2BD45B196A3DE8F98F914 |
|
CONTENT
ssdeep
|
1536:AUf+FuVGq7QHXSRyH7cmvyHvC0Sf55csHMmoROszx46xXzZ:1jNyb2PCxcsKZzx4KN |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c62b5264334f475b |
|
VISUAL
aHash
|
00fffffffff0f0c0 |
|
VISUAL
dHash
|
4d1c627a05240594 |
|
VISUAL
wHash
|
00043efffff0f0c0 |
|
VISUAL
colorHash
|
070060000c0 |
|
VISUAL
cropResistant
|
8c70623825240594,b9c9c94f494959b4,2424042425951464 |
• Threat: Credential harvesting phishing
• Target: Navy Federal Credit Union members
• Method: Fake login page on free hosting to steal usernames and passwords
• Exfil: Likely to a remote server controlled by the attacker
• Indicators: Free hosting, domain name not matching the legitimate site, presence of login form
• Risk: HIGH - Immediate credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain