Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B45175E30560F25D21C6D6DE9F3AEE89578A95B9EEA3024241DD479A44D7CD0FE0B840 |
|
CONTENT
ssdeep
|
48:MupZZRkqVf3GqF+kwWPOID6LDAaFP7UU76u5iBt+0c4WwZrgjW9x:Mu/fLfj+BW2I0XT5iy0cVQriWD |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9c8dd2d5c8cc2277 |
|
VISUAL
aHash
|
5f1b0b1b12020000 |
|
VISUAL
dHash
|
b2f296b2768e848d |
|
VISUAL
wHash
|
ff1f1b7f8242c240 |
|
VISUAL
colorHash
|
01e00000000 |
|
VISUAL
cropResistant
|
fef6327252129a1a,a2805b7878828098,b2f296b2768e848d |
• Threat: Recruitment scam
• Target: Job seekers
• Method: Social engineering via messaging apps
• Exfil: Telegram/WhatsApp redirection
• Indicators: Obfuscated JS and suspicious domain age
• Risk: Medium
Directing victims to encrypted messaging apps to establish a communication channel for scams.
Using obfuscated scripts to hide the destination or track visitors.