Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14131CE31C0C48CAF0556C7D88B32761BF2D68719C6036E0599EA579E2A8AD66CC07884 |
|
CONTENT
ssdeep
|
24:tCcH4/uzz8thDiG0lC9HXHJbqnDHXHJaVD/62ujCsUR/2DQAJ92t6dT:lH6uzY2G0lIb2NaVD/6hW6QATbdT |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cc6666ccc6cc9933 |
|
VISUAL
aHash
|
1000181818181800 |
|
VISUAL
dHash
|
a020b2b2b2b2b2c4 |
|
VISUAL
wHash
|
3c101c1c3c3c387e |
• Threat: Fake gambling portal using Atletico Madrid branding
• Target: Users seeking Atletico Madrid content, possibly in Asia
• Method: Impersonates Atletico Madrid to lure users into a gambling site
• Exfil: Unknown, likely involves redirecting users to a gambling platform
• Indicators: Domain mismatch, Atletico Madrid and K8 logos, gambling-related Chinese text
• Risk: HIGH - Likely a gambling scam, potential for data theft upon user registration
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain