Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T138851868E3A472BC9EC683B4C5361074799F54BE7090C268E26DC9F076665DCC2DACEC |
|
CONTENT
ssdeep
|
12288:OD5rn9bMwtRwFaOKIo7Dgw9SC8bu7/1mbrnsy39WbMpj/:E9w1mDggMGmbrnsA/ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f647184d6532535d |
|
VISUAL
aHash
|
00ffefe7f3e7e7ff |
|
VISUAL
dHash
|
8c08080e160e160e |
|
VISUAL
wHash
|
00e7c3e7c3c3c3c3 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
0c0c0c0e160e160e,0001219696962101 |
• Threat: URL shortening service with potential for malicious link distribution.
• Target: General internet users.
• Method: Shortening URLs, which can be used to mask malicious links.
• Exfil: No direct data exfiltration detected.
• Indicators: Domain age over 30 days, URL shortening functionality.
• Risk: LOW - Standard URL shortening service, potential for misuse exists.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain