Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T185432AA93941B5160F7350E2709F199B733E242FA40D4AF1B160DEA974B81B9907BFCE |
|
CONTENT
ssdeep
|
768:XyWuWP/suybCqjwqU+d98/bX8UzFtut1009HpSxHyOzxHRBaW/Sy3sIWj8zZs8La:Mr00SyOloQzZs8oWQbp |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9f5ad0c252721e1f |
|
VISUAL
aHash
|
fcbf0f071f3fef8f |
|
VISUAL
dHash
|
cc307c0d78701a1a |
|
VISUAL
wHash
|
7c030707073f8f8f |
|
VISUAL
colorHash
|
07000000e00 |
|
VISUAL
cropResistant
|
cc307c0d78701a1a,45459bdce42b5521 |
⢠Threat: Phishing site impersonating Trezor
⢠Target: Trezor users globally
⢠Method: Fake Trezor Suite download page
⢠Exfil: Potential data exfiltration via obfuscated JavaScript
⢠Indicators: Free hosting, obfuscated code, mismatched domain
⢠Risk: HIGH - Potential for malware distribution
Pages with identical visual appearance (based on perceptual hash)