Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D131DD31C0C48CAF0656C7E88A367B2BF2C6871CC7036A0585FA47AE674AD76CC07885 |
|
CONTENT
ssdeep
|
24:tCcH4/u4F0lC9HXHJbqEHXHJaV/62DQAnA6UR/2qv926u6dT:lH6u4F0lIbhaV/66QACPldT |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8dad624a3c879d8d |
|
VISUAL
aHash
|
10183e1a18183800 |
|
VISUAL
dHash
|
a1f2f23232f0f0cc |
|
VISUAL
wHash
|
187e3f3f187c7c00 |
|
VISUAL
colorHash
|
39600008001 |
|
VISUAL
cropResistant
|
8c96968eaaaa869e,a1f2f23232f0f0cc |
• Threat: Brand impersonation phishing
• Target: Fans of Atletico Madrid, particularly in Asia
• Method: Using the club's imagery to promote a gambling website
• Exfil: Unknown, likely affiliate marketing or promotion of the gambling site.
• Indicators: Domain mismatch, new domain, brand impersonation, mention of K8 (gambling platform)
• Risk: HIGH - Misleading users into gambling activities or potential data compromise if further interaction occurs.
Pages with identical visual appearance (based on perceptual hash)