Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T184C1D8E3532084990ACB85A7FF2AB69A7143F4DEFA9216C44BE7E635D4D2CD0EC11C51 |
|
CONTENT
ssdeep
|
96:b6SGSCa0SdLwuc8QxuOoRnigni6UjoIItV0OKP7B6eGvtJYtd:JGSkSqugxuOoRnigni6U3qV0OKPGHed |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9c9cd4e3f3c1d8c0 |
|
VISUAL
aHash
|
7f1f1f0800e0f0f8 |
|
VISUAL
dHash
|
f2b3b2b28e808080 |
|
VISUAL
wHash
|
7f1f1f0b00e0f0f8 |
• Threat: Telegram channel phishing
• Target: Telegram users
• Method: Encouraging users to join a malicious Telegram channel.
• Exfil: Unknown, potentially data exfiltration via the channel.
• Indicators: Domain mismatch (jointelegram.me vs telegram.org), suspicious channel name "iSpoof.store"
• Risk: HIGH - Potential for malware distribution, data theft or scamming through the channel.