Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1526244F1D568A93705B381C2ABA65F2732F1454AE78B021643FD439C8FFAD51FE12A42 |
|
CONTENT
ssdeep
|
384:P44AJlOrJCO9qtBEvqqVsbPOC0zWUTQRjZpvpvyaOoqyZ0bRe29ZS:P44qCCO9qtBEvqqVsbPOUXHOde29Y |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cccd2666598c6e33 |
|
VISUAL
aHash
|
383c3c3c3c381400 |
|
VISUAL
dHash
|
6071713271606431 |
|
VISUAL
wHash
|
3cbcbcbc3c3c3e00 |
|
VISUAL
colorHash
|
39001c00000 |
|
VISUAL
cropResistant
|
611b09b56a6b3b2f,6071713271606431 |
⢠Threat: Phishing/Scam
⢠Target: Potentially anyone
⢠Method: Malicious website promoting crypto or incentives.
⢠Exfil: Unknown, likely to a server controlled by the attackers.
⢠Indicators: Obfuscated code, suspicious brand and domain.
⢠Risk: High
This website is likely designed to lure visitors into providing sensitive information or participating in a fraudulent scheme. The unusual branding and domain name are key indicators. The obfuscated JavaScript code suggests attempts to redirect or steal user data.
Pages with identical visual appearance (based on perceptual hash)