Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12DD183E4AA3CB63D140F87ACCB6EF682235FA0EDF3170564638E56B11587E6CE946C14 |
|
CONTENT
ssdeep
|
96:e35KFSe0BlTSc/Q04JvN/Un4jFSe0BlTSc/Q04JWatPTOYuFA9ed/WqtuA:ZAN3J4JvBAN3J4J/iVW9eJW4uA |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cccc3333cccc6633 |
|
VISUAL
aHash
|
0000181818180000 |
|
VISUAL
dHash
|
100c32b2b2320c10 |
|
VISUAL
wHash
|
3c3c3c3c1c1c0c0c |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
100c32b2b2320c10 |
• Threat: Bot verification screen on VK
• Target: VK users
• Method: Showing a captcha-like screen to verify human activity
• Exfil: No data exfiltration detected, but potential for tracking user activity after verification
• Indicators: Subdomain of vk.com, captcha-like screen
• Risk: LOW - Bot verification screen.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain