Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B17309F162B4667C000703D9EFD36AE4232DE16DE1B34684B2BD45B196A3DE8F98F914 |
|
CONTENT
ssdeep
|
1536:AUf+FuVGq7QHXSRyH7cmvyHvC0Sf55csHMmoROszx46xXzZ:1jNyb2PCxcsKZzx4KN |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c62b5264334f475b |
|
VISUAL
aHash
|
00fffffffff0f0c0 |
|
VISUAL
dHash
|
4d1c627a05240594 |
|
VISUAL
wHash
|
00043efffff0f0c0 |
|
VISUAL
colorHash
|
070060000c0 |
|
VISUAL
cropResistant
|
8c70623825240594,b9c9c94f494959b4,2424042425951464 |
• Threat: Credential harvesting phishing attack
• Target: Navy Federal Credit Union customers
• Method: Fake login page on a free hosting platform to steal usernames and passwords
• Exfil: Likely a custom API or webhook
• Indicators: Free hosting, mismatched domain, Navy Federal Credit Union branding
• Risk: HIGH - Real-time credential theft
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain