Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12F32643151B4F43B10C7A5EAE3F09746D3D28217CE561A55E2F5C2988BE2DCACD2709A |
|
CONTENT
ssdeep
|
96:dW2dw0AoUCwQc4e+W9s+WYw+W7z+W/9y+WOQ+WT0+WYA+W7H+Wm1+WGhTr0jSCdF:dW2dZAoLLIW5TgTUxPaMTImCLLa+ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b1d401f44fd425de |
|
VISUAL
aHash
|
feffffffffc3ff00 |
|
VISUAL
dHash
|
a017140600961463 |
|
VISUAL
wHash
|
00c3cfdfdfc3c300 |
|
VISUAL
colorHash
|
07038000000 |
|
VISUAL
cropResistant
|
a01714060016146b,0008103030100800,85030b2b8b1b8040 |
• Threat: Phishing targeting CM health insurance customers.
• Target: Individuals in Belgium using CM health insurance.
• Method: Fake login form requesting personal and financial information to resolve a fictitious issue.
• Exfil: Data is likely sent to an attacker-controlled server.
• Indicators: Unrelated domain name, recent domain registration, requests personal data, obfuscated Javascript
• Risk: HIGH - Potential for identity theft and financial fraud.
Pages with identical visual appearance (based on perceptual hash)