Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E101FE6B9105401B2A89F8997442BF88A286896D77B61881FAC0D0F4288705ACB74378 |
|
CONTENT
ssdeep
|
12:nKCy7DXoE1xMpuD9M5Yx3d9MnMt5vMGLtv8LK1HUZeMPMApUX/ftukQyMF5H3j:nPCDXjCuDKOdKMt5kGpv8QHUZe6BM/Ze |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b333339999999989 |
|
VISUAL
aHash
|
ffe7e7ffffffffff |
|
VISUAL
dHash
|
284d4c3000000000 |
|
VISUAL
wHash
|
27270f0f0f0f0f0f |
• Threat: Informational page indicating domain registration
• Target: Users visiting domains protected by MarkMonitor
• Method: Displaying a standard message about domain protection
• Exfil: No data exfiltration is occurring
• Indicators: Standard MarkMonitor domain registration message
• Risk: LOW - Informational page, no malicious activity
Pages with identical visual appearance (based on perceptual hash)
Found 4 other scans for this domain