Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T131B25231D455AA3A45D7C3E99B36632733B5D18EEE470192E3FC83AC0BD2E99EC62150 |
|
CONTENT
ssdeep
|
192:8SLMQbFBMrKl7s4487FmBSoKn1yRJKKJV96zsAaAJHcbJ3bDSSEHEwLVL7LhMxEd:jLv3O44tSoKnYScjWJ8bJaSGl0M0Sz |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9c9d35649693cc6c |
|
VISUAL
aHash
|
0607183c18100000 |
|
VISUAL
dHash
|
d42a326970340800 |
|
VISUAL
wHash
|
7fdfdfbc3c180000 |
|
VISUAL
colorHash
|
38007000000 |
|
VISUAL
cropResistant
|
d42a326970340800 |
• Threat: Potentially malicious activity related to IP stressing tools.
• Target: Organizations using IP stressers.
• Method: Providing a platform for network stress testing.
• Exfil: No data exfiltration detected.
• Indicators: The domain name matches the content of the website.
• Risk: LOW - While the service itself may be used for malicious purposes (DDoS attacks), the website does not appear to be phishing or distributing malware.
Pages with identical visual appearance (based on perceptual hash)