Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B074C7C970E1B0A207B675AC966F9007B1BBD5A538CCC920E95CEDC86E7C49E4133E76 |
|
CONTENT
ssdeep
|
6144:m7gA2fwVLQyB5Qb2qlXorxUXGRtThLydO5vBmJ:LgDQ38bIJ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8c9cc6e3f1c9c8e1 |
|
VISUAL
aHash
|
7f1f1f180000f0f8 |
|
VISUAL
dHash
|
fabab2b2cec0c0c0 |
|
VISUAL
wHash
|
ff1f1f180060f0fc |
• Threat: Potential impersonation of a Telegram channel
• Target: Users interested in financial tips and advice
• Method: Redirecting users to a Telegram channel for financial gain
• Exfil: No data exfiltration detected
• Indicators: Unofficial domain, promotion of Telegram channel
• Risk: LOW - Users might be misled to join a potentially unreliable Telegram channel
Pages with identical visual appearance (based on perceptual hash)