Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T123E229B4A230D335B1C247E8DA6425287A5FE1DCD7C695B4F388AF51B0D6CE8D9260CB |
|
CONTENT
ssdeep
|
384:4r/aJcuvJboTZRhiXkdvNTDhPhLxeAxeDWNW1Tp34PxeeJEmuW3AsU4RW8Md:4r/aJcuvJbchhPhleMeDGCSPxeeWmHjW |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c6313fdc6c230be8 |
|
VISUAL
aHash
|
00666070f0f0f0f0 |
|
VISUAL
dHash
|
5cdcdac3a1e4e441 |
|
VISUAL
wHash
|
806662f0f8f0fef0 |
|
VISUAL
colorHash
|
31601400008 |
|
VISUAL
cropResistant
|
5e5e2e8efcf0e049,80c0e6343070f0e4,5cdcdac3a1e4e441 |
• Threat: Celebrity impersonation credential harvesting phishing kit
• Target: Users interested in gambling or Kylie Jenner
• Method: Luring users into registering on a fake gambling platform with the promise of a free reward to steal login information
• Exfil: Email and password data will be exfiltrated to a remote server.
• Indicators: The domain is new and unrelated to Kylie Jenner, registration form for a dubious 'free reward', unusual .com TLD for a betting site.
• Risk: HIGH - Immediate credential theft and potential account compromise
Pages with identical visual appearance (based on perceptual hash)