Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T175811E30602125A7570B0EE978B57B0E35ABC3CECA4314182AAC93DD5BF3EB8DD15566 |
|
CONTENT
ssdeep
|
96:nqZeEo44hgqAwke4Nbt6lS4I0swKq+3XucTGM:KeE1NYlSu/u9l |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
99b3e7c94c662233 |
|
VISUAL
aHash
|
ffff3e1818181800 |
|
VISUAL
dHash
|
f8f8f8b0b2b2b28a |
|
VISUAL
wHash
|
ffff7f1c18181800 |
|
VISUAL
colorHash
|
13c00008000 |
|
VISUAL
cropResistant
|
e0e0f0f0f0f0f070,a2e2ecbae2339aa2,f8f8f8b0b2b2b28a |
• Threat: Potential credential harvesting, but likely legitimate
• Target: Ipco employees
• Method: Standard login form for Microsoft services
• Exfil: Assumed Microsoft login servers
• Indicators: Legitimate Microsoft branding, standard login process, no suspicious scripts detected
• Risk: LOW - Standard login page, assumes users are aware of phishing risks
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain