Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11AA283387295567B31C795F2B7216B6D7298C24FC727DA88A3F8C28977DEC668C61300 |
|
CONTENT
ssdeep
|
384:OCsq6hsVBChUqL2OHfvm4tTig+4/2m2VVUrvA+QFXhkVDHV:OtFmoHfvjsQjA+SXhktHV |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
fc3a6aa581e11f26 |
|
VISUAL
aHash
|
8f0181ffffe2e2f0 |
|
VISUAL
dHash
|
5f35159696568616 |
|
VISUAL
wHash
|
8f0101ffe3e2e0f8 |
|
VISUAL
colorHash
|
07006008000 |
|
VISUAL
cropResistant
|
ffffdde9f1f9dfff,ffffdde9f1f9ddff,5f35159696568616 |
Code Analysis
🔬 Threat Analysis Report
• Threat: Phishing
• Target: Binance users
• Method: Impersonation and urgency
• Exfil: Likely steals login credentials and potentially financial information.
• Indicators: New domain, fake BTC balance, countdown timer, and instructions to withdraw funds.
• Risk: HIGH
🔒 Obfuscation Detected
- fromCharCode
- unicode_escape
🎯 Kit Endpoints
- loginer.php
📊 Risk Score Breakdown
Contributing Factors
🔬 Comprehensive Threat Analysis
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 6 obfuscation techniques
🏢 Brand Impersonation Analysis
Fraudulent Claims
⚔️ Attack Methodology
Primary Method: Credential Harvesting
The site is attempting to trick users into entering their Binance login credentials, likely through a form or link to a fake login page. The promise of a large Bitcoin balance and the threat of account blocking creates a strong incentive.
Secondary Method: Social Engineering
The site uses social engineering tactics, such as creating a sense of urgency and offering a reward, to manipulate users into providing their sensitive information. The use of a countdown timer increases the pressure.
🌐 Infrastructure Indicators of Compromise
Domain Information
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
