Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T109837722D397191390A7D1D9B072470933928B89C7134FB577FD27BAF9CECB52622298 |
|
CONTENT
ssdeep
|
1536:e3bZlx0kee8XeSXehVPUgOq61ezdpgJTeUkeeIdqtSjQCwrWzSzFXM/52wfHI7L+:l1oPUgOq6prVPJiRk222I22222228JXj |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b2cdc73930938ccd |
|
VISUAL
aHash
|
fff17f46c1c147c5 |
|
VISUAL
dHash
|
c0e7e48c8f8d8c8d |
|
VISUAL
wHash
|
fff17e4645404645 |
|
VISUAL
colorHash
|
02200038000 |
|
VISUAL
cropResistant
|
c0e7e48c8f8d8c8d,9192b2b0a9a0a2f2,01d924f035172b2b,d7693248cccc452c,676d4f7747597b23,9793d6c469239171,4743712d31302061 |
โข Threat: Phishing
โข Target: Shopee users
โข Method: Impersonation through a fake giveaway.
โข Exfil: Unknown, likely harvesting personal information, credentials, or promoting malicious downloads.
โข Indicators: Domain mismatch, Shopee branding, fake giveaway.
โข Risk: HIGH
The attackers are impersonating Shopee using a look-alike website on a free hosting platform. The site offers a fake giveaway to lure in victims.
The site leverages users' trust in the Shopee brand and creates a sense of excitement and potential reward to entice them to engage. They are counting on the victims ignoring the domain, since they are familiar with the brand itself.
Pages with identical visual appearance (based on perceptual hash)